@glw907/cairn-cms 0.62.1 → 0.68.0

package/CHANGELOG.md

@@ -2,6 +2,149 @@
 
 All notable changes to this project are recorded here, most recent first.
 
+## 0.68.0
+
+<!-- release-size: minor -->
+
+The second pre-cutover engine-hardening pass clears eight engine-misc items: two admin accessibility
+fixes, an engine default-icon fallback, and gate, doc, and tooling hygiene.
+
+The component picker dialog now caps its height at 85vh and scrolls its catalog within a held header
+and footer, so a long catalog no longer takes the page over. A repeated content-lifecycle error in the
+concept list now re-announces to a screen reader: the errors route through one polite live region that
+re-speaks an identical message through an invisible nonce, and the visible alerts drop their redundant
+`role` so the message announces once.
+
+The component registry ships a default role-to-glyph fallback for the conventional admonition roles
+(`note`, `tip`, `important`, `warning`, `caution`, `info`, `danger`). A component that declares an icon
+field but no `defaultIconByRole` entry for a role now resolves the engine default, which a site's icon
+set styles; a component's own `defaultIconByRole` still wins. The `ComponentDef.icon` and
+`defaultIconByRole` guidance now states the "logically representative, prefer distinct" rule.
+
+Three gates and one doc tightened: the admin-prose gate now scans the `.ts` copy modules it skipped, a
+new `check:dev-package` gate type-checks and comment-lints `packages/**` in CI, the two
+`rehype-dispatch` helpers gained real doc contracts, and the friction log marks its killed and shipped
+items resolved so it stops resurfacing dead work.
+
+No consumer action is required. The accessibility fixes and the icon fallback are additive; a site using
+the registry's `defaultIcon` may now see an engine default glyph where it previously saw none.
+
+## 0.67.0
+
+<!-- release-size: minor -->
+
+The Contract v2 `fieldset` validator reaches constraint parity with `defineFields`, the first of two
+pre-cutover engine-hardening passes. Both validators now call one shared constraint module, so they
+cannot drift, and a v1-vs-v2 parity matrix proves they agree on the overlapping field types.
+
+The `fieldset` validator gains the checks it lacked. A `text` or `textarea` field now enforces its
+`min`, `max`, `length`, and `pattern`, and a `date` field enforces its `min` and `max`, with the same
+messages `defineFields` produces. A malformed `pattern` now fails at `fieldset()` call time, not on
+every save, the way `defineFields` already compiled patterns at declaration. The validator also reads a
+parsed value, not only a form string: a numeric `number` (a finite `0` included), a `Date` on a
+`datetime` field, the way the `date` field already coerced a parsed `Date`. A `multiselect` given a lone
+scalar (a single hand-edited `tags: news`) coerces it to a single-element list rather than dropping it
+or reporting a misleading "required".
+
+No consumer action is required. The `fieldset` surface is still additive and not yet wired into the
+adapter or editor, and the new behavior brings it in line with the long-standing `defineFields` checks.
+
+## 0.66.0
+
+<!-- release-size: minor -->
+
+Contract v2 begins with an additive `fields.*` field vocabulary, exported beside the existing
+`defineFields` model. The new surface is opt-in and does not yet wire into the adapter or editor, so a
+site on the current field model is unaffected.
+
+A concept can declare its fields as a record of `fields.*` constructors, each returning a plain-data
+descriptor. The scalars are `text`, `textarea`, `number`, `select`, `multiselect`, `url`, `email`,
+`date`, `datetime`, and `boolean`, with `image` as the rich leaf. `fieldset(record)` derives a
+server-side validator from those descriptors, returning field-keyed errors or normalized data, and
+exposes Standard Schema v1 at its boundary. `InferFieldset` reads the inferred frontmatter type from a
+fieldset, and `initialValues` resolves each field's `default` for the editor form, including the
+`'today'` sentinel on a date field through an injected clock. The new root-barrel exports are `fields`,
+`fieldset`, `initialValues`, and the types `FieldDescriptor`, `Fieldset`, `InferFieldset`,
+`FieldsetOptions`, and `BehaviorTable`.
+
+No consumer action is required. The vocabulary is a foundation; the contract-v2 cutover, a later
+breaking release, migrates concepts off `defineFields` and carries the "Consumers must:" line then.
+
+## 0.65.0
+
+<!-- release-size: minor -->
+
+Build-time syntax highlighting moves into the engine render pipeline, and the public side gains the
+Waymark design foundation in the showcase template (the scaffolder's Part B2).
+
+Fenced code is now highlighted at build time. The render pipeline runs Shiki at build and SSR and
+emits role-bound `.cairn-tok-*` token classes with no inline style and no client highlighter, so the
+reading route ships no highlighter JavaScript and the colors come from the site's theme. The engine
+owns the `.cairn-tok-*` class contract (the way it owns `.cairn-place-*` for figures); a site styles
+the classes from its own `--cairn-code-*` variables. Adds `shiki` and `hast-util-to-string` to the
+engine's dependencies.
+
+GFM task-list checkboxes now carry an `aria-label` from their item text, so a screen reader names the
+read-only control. This clears an axe `label` violation on every site while keeping the real disabled
+input the design calls for.
+
+No consumer action is required. A site gets highlighting automatically; to color the tokens, style the
+`.cairn-tok-*` classes from a `--cairn-code-*` ramp (the Waymark showcase template does this, bound to
+the DaisyUI roles). The broader Waymark design foundation (the oklch token layer, the bespoke reading
+surface, the chrome, the `/styleguide` route, and the dual-gamut contrast, token-resolution, and
+re-skin CI gates) ships in `examples/showcase`, the deployable starter, not the published engine.
+
+## 0.64.0
+
+<!-- release-size: minor -->
+
+A small pre-Part-B DX pass fixes two engine warts the scaffolder's template would otherwise bake in,
+and retires a third item that was already resolved.
+
+`readCommittedManifest`, exported from `/media`, reads a committed media manifest from an
+`import.meta.glob` result and degrades a missing file to an empty manifest. A fresh site with no
+`src/content/.cairn/media.json` no longer fails its build: the static import that crashed gives way to
+the glob, which returns `{}` for no match. The showcase reads its manifest this way.
+
+A new `media.resolver_absent` log event (level `warn`) makes a silently-broken public-image setup
+diagnosable. The public route emits it once, at construction, when media is configured on but no
+`resolveMedia` reached it, so a forgotten resolver wiring becomes a queryable Workers Logs event
+instead of a bare `media:` token on every hero image. `PublicRoutesDeps` gains an optional
+`assetsEnabled` flag a site threads from its resolved asset config.
+
+No consumer action is required. A site that wants the no-crash manifest read can adopt
+`readCommittedManifest`, and a site that wants the resolver diagnostic threads `assetsEnabled` into
+`createPublicRoutes`.
+
+## 0.63.0
+
+<!-- release-size: minor -->
+
+The local-development fake backend moves out of the engine and the showcase into a separate, dev-only
+package, `@glw907/cairn-cms-dev`, the first part of the `create-cairn-site` scaffolder. The package
+holds the in-memory GitHub, R2, D1, and Anthropic doubles and a blessed `devBackendHandle()` that
+installs them and an owner-session bypass, so a site runs `/admin` locally with no cloud accounts. A
+consumer installs it as a `devDependency` and activates it from `hooks.server.ts` behind a
+build-foldable `dev` gate, so a production build eliminates it from the bundle.
+
+The auth guard gains a fail-closed tripwire. If `CAIRN_DEV_BACKEND` is set in a deployed runtime, the
+guard refuses the request with a 503 and logs `guard.rejected` with `reason: "dev_backend_in_prod"`.
+It reads the flag from both the Worker `platform.env` and `process.env`, so it fires on Cloudflare and
+adapter-node alike. `AuthEnv` carries a new optional `CAIRN_DEV_BACKEND?: string | boolean` field for
+it.
+
+No consumer action is required. The tripwire fires only when the flag is set, and the new package is
+opt-in for sites that want the local dev backend.
+
+## 0.62.2
+
+The edit-load address-collision advisory now checks the published corpus only. It fires when an entry
+you are editing collides with an entry already published on `main`, and it no longer reads sibling
+`cairn/<concept>/<id>` branches when an editor opens an entry, so opening the editor adds no GitHub
+reads. The publish-time re-check is unchanged: it stays full cross-branch and still emits the
+`publish.address_collision` log event when a publish overrides another entry's address. No consumer
+action is required.
+
 ## 0.62.1
 
 The entry editor gains an advisory channel and its first notice: a cross-branch address-collision

package/dist/auth/types.d.ts

@@ -11,6 +11,13 @@ export interface AuthEnv {
     AUTH_DB?: D1Database;
     /** Canonical origin for confirmation links, never read from a request header (spec 7.1, risk H3). */
     PUBLIC_ORIGIN?: string;
+    /**
+     * Dev-backend tripwire flag. The dev backend sets this in local development; if it is ever set in
+     * a deployed runtime the guard refuses (the build-foldable `dev` gate should have eliminated the
+     * dev backend, so a set flag signals a polluted environment). A string from a Worker var or a
+     * boolean.
+     */
+    CAIRN_DEV_BACKEND?: string | boolean;
     /** Cloudflare Email Sending binding. */
     EMAIL?: {
         send(message: {

package/dist/components/ComponentInsertDialog.svelte

@@ -197,11 +197,16 @@ function onSearchKeydown(e) {
 
 {#if defs.length > 0}
   <dialog class="modal" aria-labelledby="cairn-insert-dialog-title" bind:this={dialog} onclose={onClose} oncancel={onCancel}>
-    <div class="modal-box {twoPane ? 'max-w-3xl' : ''}">
+    <!-- The box caps at 85vh and is a flex column so its header holds while only the body scrolls,
+         per the design system's dialog-sizing recipe. The cap rides Tailwind utilities (the utilities
+         layer) so it beats DaisyUI's `.modal-box` max-height: 100vh; a components-layer rule loses the
+         cascade. overflow-hidden keeps the box from being a second scroll container. Matches TidyReview. -->
+    <div class="modal-box flex max-h-[85vh] flex-col overflow-hidden {twoPane ? 'max-w-3xl' : ''}">
       <!-- The shared header: at the configure step it carries the Back control and the
            "Insert > group" eyebrow breadcrumb above the component label; while browsing it is the
-           plain "Insert a component" title. -->
-      <div class="mb-3 flex items-center gap-3">
+           plain "Insert a component" title. It holds (flex-none) while the body scrolls, per the
+           design system's dialog-sizing recipe. -->
+      <div class="mb-3 flex flex-none items-center gap-3">
         {#if picked && !editing}
           <button type="button" class="btn btn-ghost btn-sm btn-square" aria-label="Back to components" onclick={back}>
             <svg class="h-4 w-4" viewBox="0 0 256 256" fill="currentColor" aria-hidden="true"><path d="M165.7 202.3a8 8 0 0 1-11.4 11.4l-80-80a8 8 0 0 1 0-11.4l80-80a8 8 0 0 1 11.4 11.4L91.3 128Z" /></svg>
@@ -219,6 +224,9 @@ function onSearchKeydown(e) {
       </div>
 
       {#if picked}
+        <!-- The configure body is the box's scroll container (flex-1, min-h-0): the shared header
+             above holds while the form scrolls within the 85vh cap. -->
+        <div class="-mr-1 flex min-h-0 flex-1 flex-col overflow-y-auto pr-1">
         {#key picked}
           {#if twoPane}
             <!-- Two panes: the form on the left, the live preview on the right. Below the breakpoint
@@ -275,9 +283,10 @@ function onSearchKeydown(e) {
             {@render configureForm(picked)}
           {/if}
         {/key}
+        </div>
       {:else}
         {#if showSearch}
-          <div class="mb-3 flex items-center gap-2 rounded-field border border-[var(--cairn-card-border)] bg-base-100 px-3 py-2">
+          <div class="mb-3 flex flex-none items-center gap-2 rounded-field border border-[var(--cairn-card-border)] bg-base-100 px-3 py-2">
             <svg class="ec-glyph h-4 w-4 text-[var(--color-muted)]" viewBox="0 0 256 256" fill="currentColor" aria-hidden="true"><path d="M229.7 218.3 179.6 168.2A92.2 92.2 0 1 0 168.2 179.6l50.1 50.1a8 8 0 0 0 11.4-11.4ZM40 112a72 72 0 1 1 72 72 72.1 72.1 0 0 1-72-72Z" /></svg>
             <input
               type="search"
@@ -301,8 +310,10 @@ function onSearchKeydown(e) {
             <button type="button" class="text-[0.8125rem] font-medium text-primary underline [text-underline-offset:2px]" onclick={() => (query = '')}>Clear search</button>
           </div>
         {:else}
-          <!-- One scroll region holds every group, so the arrow keys roam the whole catalog. -->
-          <div data-cairn-pk-list>
+          <!-- One scroll region holds every group, so the arrow keys roam the whole catalog. It
+               is the box's scroll container (flex-1, min-h-0): the header above holds while the
+               list scrolls within the 85vh cap. -->
+          <div data-cairn-pk-list class="-mr-1 min-h-0 flex-1 overflow-y-auto pr-1">
             {#each groups as group (group.heading)}
               <div class="mt-3 first:mt-0">
                 {#if group.heading}

package/dist/components/ConceptList.svelte

@@ -120,6 +120,22 @@ const sortButton = `inline-flex items-center gap-1 ${headerLabel} hover:text-bas
 const publishedAllMessage = $derived(
   data.publishedAll !== null && data.publishedAll > 0 ? `Published ${data.publishedAll} ${data.publishedAll === 1 ? "entry" : "entries"}.` : ""
 );
+const lifecycleError = $derived(
+  deleteRefused ? `This ${data.label.toLowerCase()} could not be deleted. ${deleteRefused.inboundLinks.length} ${deleteRefused.inboundLinks.length === 1 ? "page links" : "pages link"} to it.` : data.formError ?? data.error ?? ""
+);
+let announceNonce = $state(0);
+function nonce() {
+  return announceNonce % 2 === 0 ? "" : "​";
+}
+let lastSubmit;
+$effect(() => {
+  const submit = form ?? data;
+  if (submit !== lastSubmit) {
+    lastSubmit = submit;
+    if (lifecycleError) announceNonce++;
+  }
+});
+const liveError = $derived(lifecycleError ? `${lifecycleError}${nonce()}` : "");
 </script>
 
 <!-- The non-color selected cue for the triage controls (WCAG 1.4.1): a small check glyph that
@@ -145,20 +161,25 @@ const publishedAllMessage = $derived(
      {#if}-gated role element inserted fresh is announced inconsistently, so the visible alert
      below keeps its styling without a role and the message is announced once. -->
 <div class="sr-only" aria-live="polite">{publishedAllMessage}</div>
+<!-- One persistent polite region announces the lifecycle errors, re-announcing a repeat through the
+     nonce. The visible alerts below keep their styling and drop the live `role` (a fresh-inserted
+     role element announces inconsistently and clobbers a repeat), so the message is announced once. -->
+<div class="sr-only" aria-live="polite">{liveError}</div>
 {#if publishedAllMessage}
   <div class="alert alert-success mb-4 text-sm">{publishedAllMessage}</div>
 {/if}
 {#if data.formError}
-  <div role="alert" class="alert alert-error mb-4 text-sm">{data.formError}</div>
+  <div class="alert alert-error mb-4 text-sm">{data.formError}</div>
 {/if}
 {#if data.error}
-  <div role="alert" class="alert alert-warning mb-4 text-sm">{data.error}</div>
+  <div class="alert alert-warning mb-4 text-sm">{data.error}</div>
 {/if}
 
 {#if deleteRefused}
   <!-- A `?/delete` was refused: name the blockers up front, matching the editor's refusal banner,
-       so the author sees why without re-opening a dialog. -->
-  <div role="alert" aria-label="This {data.label.toLowerCase()} could not be deleted" class="alert alert-error mb-4 flex-col items-start text-sm">
+       so the author sees why without re-opening a dialog. The polite region above announces it, so
+       the box itself carries no role or label (a bare div with an aria-label gets no accessible name). -->
+  <div class="alert alert-error mb-4 flex-col items-start text-sm">
     <p class="font-medium">This {data.label.toLowerCase()} could not be deleted.</p>
     <p>{deleteRefused.inboundLinks.length} {deleteRefused.inboundLinks.length === 1 ? 'page links' : 'pages link'} to it. Remove or repoint the {deleteRefused.inboundLinks.length === 1 ? 'link' : 'links'} listed below, then delete again.</p>
     <ul class="mt-1 w-full">

package/dist/components/cairn-admin.css

@@ -3361,6 +3361,10 @@
     top: calc(var(--spacing) * 16);
   }
 
+  :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .top-\[-3rem\] {
+    top: -3rem;
+  }
+
   :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .top-\[0\.875rem\] {
     top: .875rem;
   }
@@ -3389,6 +3393,10 @@
     left: calc(var(--spacing) * 2);
   }
 
+  :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .left-\[var\(--cairn-space-s\)\] {
+    left: var(--cairn-space-s);
+  }
+
   :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .join {
     --join-ss: 0;
     --join-se: 0;
@@ -3703,6 +3711,10 @@
     z-index: 40;
   }
 
+  :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .z-50 {
+    z-index: 50;
+  }
+
   :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .order-1 {
     order: 1;
   }
@@ -4075,6 +4087,10 @@
     margin-top: calc(var(--spacing) * 16);
   }
 
+  :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .mt-\[var\(--cairn-space-2xl\)\] {
+    margin-top: var(--cairn-space-2xl);
+  }
+
   :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .mt-auto {
     margin-top: auto;
   }
@@ -4083,6 +4099,10 @@
     margin-top: 1px;
   }
 
+  :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .-mr-1 {
+    margin-right: calc(var(--spacing) * -1);
+  }
+
   :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .mr-0\.5 {
     margin-right: calc(var(--spacing) * .5);
   }
@@ -4144,6 +4164,10 @@
     margin-bottom: calc(var(--spacing) * 7);
   }
 
+  :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .mb-\[var\(--cairn-space-s\)\] {
+    margin-bottom: var(--cairn-space-s);
+  }
+
   :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .-ml-px {
     margin-left: -1px;
   }
@@ -4702,6 +4726,14 @@
     height: .6875rem;
   }
 
+  :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .h-\[1\.4rem\] {
+    height: 1.4rem;
+  }
+
+  :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .h-\[1\.55rem\] {
+    height: 1.55rem;
+  }
+
   :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .h-\[26px\] {
     height: 26px;
   }
@@ -4758,6 +4790,10 @@
     max-height: 100%;
   }
 
+  :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .min-h-0 {
+    min-height: calc(var(--spacing) * 0);
+  }
+
   :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .min-h-6 {
     min-height: calc(var(--spacing) * 6);
   }
@@ -4916,6 +4952,14 @@
     width: .6875rem;
   }
 
+  :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .w-\[1\.4rem\] {
+    width: 1.4rem;
+  }
+
+  :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .w-\[1\.55rem\] {
+    width: 1.55rem;
+  }
+
   :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .w-\[3\.25rem\] {
     width: 3.25rem;
   }
@@ -4968,6 +5012,10 @@
     max-width: 30%;
   }
 
+  :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .max-w-\[38rem\] {
+    max-width: 38rem;
+  }
+
   :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .max-w-\[40ch\] {
     max-width: 40ch;
   }
@@ -4992,6 +5040,14 @@
     max-width: 640px;
   }
 
+  :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .max-w-\[var\(--cairn-measure\)\] {
+    max-width: var(--cairn-measure);
+  }
+
+  :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .max-w-\[var\(--cairn-measure-wide\)\] {
+    max-width: var(--cairn-measure-wide);
+  }
+
   :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .max-w-full {
     max-width: 100%;
   }
@@ -5040,7 +5096,7 @@
     flex: none;
   }
 
-  :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .shrink {
+  :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .flex-shrink, :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .shrink {
     flex-shrink: 1;
   }
 
@@ -5250,6 +5306,18 @@
     gap: calc(var(--spacing) * 6);
   }
 
+  :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .gap-\[0\.55rem\] {
+    gap: .55rem;
+  }
+
+  :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .gap-\[var\(--cairn-space-m\)\] {
+    gap: var(--cairn-space-m);
+  }
+
+  :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .gap-\[var\(--cairn-space-s\)\] {
+    gap: var(--cairn-space-s);
+  }
+
   :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .gap-px {
     gap: 1px;
   }
@@ -5476,6 +5544,15 @@
     }
   }
 
+  @layer daisyui.l1.l2 {
+    :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .badge-outline {
+      color: var(--badge-color);
+      --badge-bg: #0000;
+      background-image: none;
+      border-color: currentColor;
+    }
+  }
+
   :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .border-\[color-mix\(in_oklab\,var\(--cairn-card-border\)_70\%\,transparent\)\] {
     border-color: var(--cairn-card-border);
   }
@@ -5546,7 +5623,7 @@
     }
   }
 
-  :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .border-\[var\(--cairn-card-border\)\] {
+  :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .border-\[color\:var\(--cairn-card-border\)\], :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .border-\[var\(--cairn-card-border\)\] {
     border-color: var(--cairn-card-border);
   }
 
@@ -6245,6 +6322,18 @@
     padding-inline: calc(var(--spacing) * 7);
   }
 
+  :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .px-\[0\.1rem\] {
+    padding-inline: .1rem;
+  }
+
+  :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .px-\[0\.9rem\] {
+    padding-inline: .9rem;
+  }
+
+  :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .px-\[var\(--cairn-space-m\)\] {
+    padding-inline: var(--cairn-space-m);
+  }
+
   :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .px-px {
     padding-inline: 1px;
   }
@@ -6313,10 +6402,26 @@
     padding-block: calc(var(--spacing) * 16);
   }
 
+  :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .py-\[0\.3rem\] {
+    padding-block: .3rem;
+  }
+
+  :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .py-\[0\.5rem\] {
+    padding-block: .5rem;
+  }
+
   :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .py-\[5px\] {
     padding-block: 5px;
   }
 
+  :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .py-\[var\(--cairn-space-xl\)\] {
+    padding-block: var(--cairn-space-xl);
+  }
+
+  :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .py-\[var\(--cairn-space-xs\)\] {
+    padding-block: var(--cairn-space-xs);
+  }
+
   :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .py-px {
     padding-block: 1px;
   }
@@ -6341,6 +6446,18 @@
     padding-top: calc(var(--spacing) * 4);
   }
 
+  :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .pt-\[var\(--cairn-space-l\)\] {
+    padding-top: var(--cairn-space-l);
+  }
+
+  :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .pt-\[var\(--cairn-space-s\)\] {
+    padding-top: var(--cairn-space-s);
+  }
+
+  :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .pr-1 {
+    padding-right: calc(var(--spacing) * 1);
+  }
+
   :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .pr-3 {
     padding-right: calc(var(--spacing) * 3);
   }
@@ -6353,6 +6470,10 @@
     padding-bottom: calc(var(--spacing) * 1.5);
   }
 
+  :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .pb-\[var\(--cairn-space-xl\)\] {
+    padding-bottom: var(--cairn-space-xl);
+  }
+
   :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .pl-3 {
     padding-left: calc(var(--spacing) * 3);
   }
@@ -6377,6 +6498,10 @@
     text-align: right;
   }
 
+  :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .font-\[family-name\:var\(--font-body\)\] {
+    font-family: var(--font-body);
+  }
+
   :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .font-\[family-name\:var\(--font-display\)\] {
     font-family: var(--font-display);
   }
@@ -6482,12 +6607,34 @@
     font-size: 1.0625rem;
   }
 
+  :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .text-\[length\:var\(--cairn-step--1\)\] {
+    font-size: var(--cairn-step--1);
+  }
+
+  :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .text-\[length\:var\(--cairn-step-1\)\] {
+    font-size: var(--cairn-step-1);
+  }
+
+  :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .text-\[length\:var\(--cairn-step-5\)\] {
+    font-size: var(--cairn-step-5);
+  }
+
   @layer daisyui.l1.l2 {
     :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .textarea-sm {
       font-size: max(var(--font-size, .75rem), .75rem);
     }
   }
 
+  :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .leading-\[var\(--cairn-leading-snug\)\] {
+    --tw-leading: var(--cairn-leading-snug);
+    line-height: var(--cairn-leading-snug);
+  }
+
+  :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .leading-\[var\(--cairn-leading-tight\)\] {
+    --tw-leading: var(--cairn-leading-tight);
+    line-height: var(--cairn-leading-tight);
+  }
+
   :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .leading-relaxed {
     --tw-leading: var(--leading-relaxed);
     line-height: var(--leading-relaxed);
@@ -6548,6 +6695,16 @@
     letter-spacing: .12em;
   }
 
+  :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .tracking-\[var\(--cairn-tracking-eyebrow\)\] {
+    --tw-tracking: var(--cairn-tracking-eyebrow);
+    letter-spacing: var(--cairn-tracking-eyebrow);
+  }
+
+  :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .tracking-\[var\(--cairn-tracking-tight\)\] {
+    --tw-tracking: var(--cairn-tracking-tight);
+    letter-spacing: var(--cairn-tracking-tight);
+  }
+
   :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .tracking-tight {
     --tw-tracking: var(--tracking-tight);
     letter-spacing: var(--tracking-tight);
@@ -6598,6 +6755,18 @@
     }
   }
 
+  :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .text-\[Npx\] {
+    color: Npx;
+  }
+
+  :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .text-\[Nrem\] {
+    color: Nrem;
+  }
+
+  :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .text-\[color\:var\(--cairn-muted\)\] {
+    color: var(--cairn-muted);
+  }
+
   :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .text-\[var\(--cairn-error-ink\)\] {
     color: var(--cairn-error-ink);
   }
@@ -7358,6 +7527,10 @@
     }
   }
 
+  :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .focus\:top-\[var\(--cairn-space-s\)\]:focus {
+    top: var(--cairn-space-s);
+  }
+
   :where([data-theme='cairn-admin'], [data-theme='cairn-admin-dark']) .focus-visible\:border-\[color-mix\(in_oklab\,var\(--color-primary\)_70\%\,transparent\)\]:focus-visible {
     border-color: var(--color-primary);
   }

package/dist/content/advisories.d.ts

@@ -32,6 +32,11 @@ export interface AddressEntry {
 }
 /** Permalink to the distinct entries that resolve to it, across main and every open branch. */
 export type AddressIndex = Map<string, AddressEntry[]>;
+/**
+ * The address index over main only: a synchronous reverse map of each manifest entry's resolved
+ * permalink. No backend read, so an edit-load can build it for free from the manifest it already holds.
+ */
+export declare function mainAddressIndex(manifest: Manifest): AddressIndex;
 /**
  * Build the permalink-keyed address index over main (from each manifest entry's resolved permalink)
  * plus every open cairn/* branch (resolved from its edited markdown).

package/dist/content/advisories.js

@@ -14,17 +14,11 @@ function push(index, permalink, entry) {
         index.set(permalink, [entry]);
 }
 /**
- * Build the permalink-keyed address index over main (from each manifest entry's resolved permalink)
- * plus every open cairn/* branch (resolved from its edited markdown).
- *
- * The build fails open: a branch read that throws and a permalink that cannot resolve are both caught
- * and skipped, so a transient failure degrades to a thinner index, never a thrown editor or a blocked
- * publish. The branches are read in one Promise.all, the way buildUsageIndex reads them.
+ * The address index over main only: a synchronous reverse map of each manifest entry's resolved
+ * permalink. No backend read, so an edit-load can build it for free from the manifest it already holds.
  */
-export async function buildAddressIndex(repo, token, concepts, manifest) {
+export function mainAddressIndex(manifest) {
     const index = new Map();
-    // The main arm: the manifest already carries each entry's resolved permalink, so this is a pure
-    // reverse map with no per-file read.
     for (const entry of manifest.entries) {
         push(index, entry.permalink, {
             concept: entry.concept,
@@ -33,6 +27,20 @@ export async function buildAddressIndex(repo, token, concepts, manifest) {
             source: 'main',
         });
     }
+    return index;
+}
+/**
+ * Build the permalink-keyed address index over main (from each manifest entry's resolved permalink)
+ * plus every open cairn/* branch (resolved from its edited markdown).
+ *
+ * The build fails open: a branch read that throws and a permalink that cannot resolve are both caught
+ * and skipped, so a transient failure degrades to a thinner index, never a thrown editor or a blocked
+ * publish. The branches are read in one Promise.all, the way buildUsageIndex reads them.
+ */
+export async function buildAddressIndex(repo, token, concepts, manifest) {
+    // The main arm: the manifest already carries each entry's resolved permalink, so seed from the
+    // synchronous main-only index and union the branch arm on top.
+    const index = mainAddressIndex(manifest);
     // The branch arm: read each open cairn/* branch's one edited file and resolve its permalink. The
     // path is derivable from the branch name, so no tree-listing is needed.
     const names = await listBranches(repo, PENDING_PREFIX, token);