@zigrivers/scaffold 3.30.0 → 3.31.1

package/content/guides/knowledge-freshness/index.html

@@ -48,9 +48,13 @@
     --yellow:       #d97706;
     --yellow-bg:    #fffbeb;
     --yellow-border:#fde68a;
+    --red:          #dc2626;
+    --red-bg:       #fef2f2;
+    --red-border:   #fecaca;
     --gray:         #9ca3af;
     --gray-bg:      #f3f4f6;
     --gray-border:  #e5e7eb;
+    --scrim:        rgba(15, 17, 23, 0.45);
 
     /* Semantic: Next Banner */
     --next-bg:      #eef2ff;
@@ -133,9 +137,13 @@
     --yellow:       #fbbf24;
     --yellow-bg:    rgba(120, 53, 15, 0.25);
     --yellow-border:rgba(251, 191, 36, 0.20);
+    --red:          #f87171;
+    --red-bg:       rgba(127, 29, 29, 0.25);
+    --red-border:   rgba(248, 113, 113, 0.22);
     --gray:         #6b7294;
     --gray-bg:      #252940;
     --gray-border:  #363c58;
+    --scrim:        rgba(0, 0, 0, 0.6);
 
     /* Semantic: Next Banner */
     --next-bg:      rgba(30, 27, 75, 0.50);
@@ -1078,17 +1086,290 @@ figure.mermaid svg .marker {
 }
 figure.mermaid svg .edgeLabel,
 figure.mermaid svg .edgeLabel text { fill: var(--text-muted); color: var(--text-muted); }
+
+/* ============================================================================
+ * guides.css — component + layout styles for `scaffold guides` reference pages.
+ *
+ * Pairs with lib/dashboard-theme.css (the token source) and src/guides/chrome.ts
+ * (the behavior). Styles the guide CHROME (.topbar, .layout, .rail, nav.toc,
+ * .content) and the markdown DIRECTIVES (callouts, sev chips, filter-tables,
+ * charts, tabs, citations) plus base prose typography.
+ *
+ * DESIGN SYSTEM: all COLORS come from dashboard-theme.css tokens, and spacing
+ * uses the --sp-* scale wherever it maps. The few structural layout constants
+ * (topbar height, rail/drawer width, chart label column, card min) are declared
+ * as local custom properties below; a handful of sub-scale UI values (chip/bar
+ * sizing, em-based inline-code padding) and the responsive breakpoint are
+ * literal because no token expresses them. Both themes are covered because every
+ * color is a token.
+ * ==========================================================================*/
+
+:root {
+  --topbar-h: 52px;       /* sticky topbar height; rail sticky offset keys off it */
+  --rail-w: 260px;        /* desktop TOC sidebar column */
+  --drawer-w: 280px;      /* mobile off-canvas TOC drawer */
+  --card-min: 260px;      /* index card min track width */
+  --chart-label-w: 90px;  /* chart row label column min */
+}
+
+/* ── Base / reset on top of the token base in dashboard-theme.css ─────────── */
+.content a { color: var(--accent); text-decoration: none; }
+.content a:hover { text-decoration: underline; }
+.content strong { font-weight: var(--fw-semi); }
+.content hr { border: 0; border-top: 1px solid var(--border-light); margin: var(--sp-6) 0; }
+
+/* Consistent keyboard focus for every interactive control (a11y). */
+.topbar button:focus-visible,
+.copy-btn:focus-visible,
+.tab-btn:focus-visible,
+.filter-input:focus-visible,
+nav.toc a:focus-visible,
+.guide-card:focus-visible,
+.content a:focus-visible {
+  outline: 2px solid var(--accent); outline-offset: 2px; border-radius: var(--radius-sm);
+}
+
+/* ── Topbar ────────────────────────────────────────────────────────────────*/
+.topbar {
+  position: sticky; top: 0; z-index: 60; height: var(--topbar-h);
+  display: flex; align-items: center; gap: var(--sp-3);
+  padding: 0 var(--page-pad);
+  background: var(--bg-card); border-bottom: 1px solid var(--border);
+}
+.topbar h1 {
+  flex: 1; min-width: 0; margin: 0;
+  font-size: var(--text-lg); font-weight: var(--fw-bold);
+  letter-spacing: var(--ls-tight);
+  white-space: nowrap; overflow: hidden; text-overflow: ellipsis;
+}
+.topbar button {
+  background: var(--bg-card); border: 1px solid var(--border); color: var(--text);
+  border-radius: var(--radius-sm); padding: var(--sp-1) var(--sp-3); font-size: var(--text-base);
+  line-height: 1; cursor: pointer; font-family: inherit;
+}
+.topbar button:hover { background: var(--bg-hover); border-color: var(--accent); }
+.nav-toggle { display: none; }
+
+/* ── Layout: sticky sidebar TOC + reading-width content ──────────────────── */
+.layout {
+  max-width: var(--max-w); margin: 0 auto;
+  display: grid; grid-template-columns: var(--rail-w) minmax(0, 1fr);
+  gap: var(--sp-8); padding: 0 var(--page-pad);
+}
+.rail {
+  position: sticky; top: var(--topbar-h); align-self: start;
+  height: calc(100vh - var(--topbar-h)); overflow-y: auto;
+  padding: var(--sp-5) 0; border-right: 1px solid var(--border-light);
+}
+.content { min-width: 0; padding: var(--sp-6) 0 var(--sp-10); }
+
+/* Backdrop behind the mobile drawer (toggled with the rail via chrome.ts). */
+.rail-backdrop { display: none; }
+/* In-drawer close button — hidden on desktop (the rail is a static sidebar). */
+.rail-close { display: none; }
+
+/* ── Table of contents (scrollspy marks a.active) ────────────────────────── */
+nav.toc ul { list-style: none; margin: 0; padding: 0; }
+nav.toc li { margin: 0; }
+nav.toc a {
+  display: block; padding: var(--sp-1) var(--sp-3); line-height: 1.35;
+  color: var(--text-muted); font-size: var(--text-sm);
+  text-decoration: none; border-left: 2px solid transparent;
+  border-radius: 0 var(--radius-sm) var(--radius-sm) 0;
+}
+nav.toc a:hover { color: var(--text); background: var(--bg-hover); }
+nav.toc a.active {
+  color: var(--accent); border-left-color: var(--accent);
+  background: var(--accent-glow); font-weight: var(--fw-medium);
+}
+nav.toc li.toc-3 a { padding-left: var(--sp-6); font-size: var(--text-xs); }
+
+/* ── Prose typography ──────────────────────────────────────────────────────*/
+.content h2 {
+  font-size: var(--text-xl); letter-spacing: var(--ls-tight);
+  margin: var(--sp-8) 0 var(--sp-3); padding-bottom: var(--sp-2);
+  border-bottom: 1px solid var(--border-light); scroll-margin-top: calc(var(--topbar-h) + var(--sp-3));
+}
+.content h3 {
+  font-size: var(--text-lg); margin: var(--sp-5) 0 var(--sp-2);
+  scroll-margin-top: calc(var(--topbar-h) + var(--sp-3));
+}
+.content p { margin: var(--sp-3) 0; line-height: var(--lh-relaxed); }
+.content ul, .content ol { margin: var(--sp-3) 0; padding-left: var(--sp-6); }
+.content li { margin: var(--sp-1) 0; line-height: var(--lh-relaxed); }
+.content blockquote {
+  margin: var(--sp-3) 0; padding: var(--sp-1) var(--sp-4);
+  border-left: 3px solid var(--border); color: var(--text-muted);
+}
+
+/* ── Inline code + code blocks (chrome.ts wraps <pre> in .code + .copy-btn) ──*/
+.content code {
+  font-family: var(--font-mono); font-size: 0.85em;
+  background: var(--bg-inset); padding: 0.12em 0.4em; border-radius: var(--radius-sm);
+}
+.content .code { position: relative; margin: var(--sp-3) 0; }
+.content .code pre {
+  margin: 0; padding: var(--sp-3) var(--sp-4); overflow-x: auto;
+  background: var(--bg-inset); border: 1px solid var(--border-light);
+  border-radius: var(--radius-sm); font-family: var(--font-mono);
+  font-size: var(--text-sm); line-height: var(--lh-relaxed);
+}
+.content .code pre code { background: none; padding: 0; font-size: inherit; }
+.copy-btn {
+  position: absolute; top: var(--sp-1); right: var(--sp-1);
+  background: var(--bg-card); border: 1px solid var(--border); color: var(--text-muted);
+  border-radius: var(--radius-sm); font-size: var(--text-xs); padding: var(--sp-1) var(--sp-2);
+  cursor: pointer; opacity: 0.85; font-family: inherit;
+}
+.copy-btn:hover { color: var(--accent); border-color: var(--accent); opacity: 1; }
+
+/* ── Callouts ─ (border-color BEFORE border-left-color so the accent wins) ── */
+.callout {
+  margin: var(--sp-4) 0; padding: var(--sp-3) var(--sp-4);
+  border: 1px solid var(--border); border-left-width: 3px;
+  border-radius: var(--radius-sm); background: var(--bg-card);
+}
+.callout > :first-child { margin-top: 0; }
+.callout > :last-child { margin-bottom: 0; }
+.callout-note, .callout-info { background: var(--blue-bg);   border-color: var(--blue-border);   border-left-color: var(--blue); }
+.callout-tip                 { background: var(--green-bg);  border-color: var(--green-border);  border-left-color: var(--green); }
+.callout-warning             { background: var(--yellow-bg); border-color: var(--yellow-border); border-left-color: var(--yellow); }
+.callout-danger              { background: var(--red-bg);    border-color: var(--red-border);    border-left-color: var(--red); }
+
+/* ── Severity chips (:sev) — tight pill, sub-scale vertical padding ───────── */
+.sev {
+  display: inline-block; font-size: var(--text-xs); font-weight: var(--fw-semi);
+  padding: 1px var(--sp-2); border-radius: 999px; line-height: 1.5;
+  border: 1px solid var(--border); background: var(--bg-inset); color: var(--text-muted);
+  white-space: nowrap;
+}
+.sev-p0   { color: var(--sev-p0);   border-color: var(--sev-p0); }
+.sev-p1   { color: var(--sev-p1);   border-color: var(--sev-p1); }
+.sev-p2   { color: var(--sev-p2);   border-color: var(--sev-p2); }
+.sev-p3   { color: var(--sev-p3);   border-color: var(--sev-p3); }
+.sev-pass { color: var(--sev-pass); border-color: var(--sev-pass); }
+
+/* ── Citations (:cite) — inline provenance refs ──────────────────────────── */
+.fp, .cite-advisory {
+  font-family: var(--font-mono); font-size: 0.82em;
+  padding: 0.05em 0.35em; border-radius: var(--radius-sm);
+  background: var(--bg-inset); border: 1px solid var(--border-light);
+}
+.fp { color: var(--accent); }
+.cite-advisory { color: var(--text-faint); border-style: dashed; }
+
+/* ── Tables + filter-tables ──────────────────────────────────────────────── */
+.content table { width: 100%; border-collapse: collapse; margin: var(--sp-3) 0; font-size: var(--text-sm); }
+.content th, .content td { text-align: left; padding: var(--sp-2) var(--sp-3); border-bottom: 1px solid var(--border-light); vertical-align: top; }
+.content th {
+  color: var(--text-muted); font-weight: var(--fw-semi); font-size: var(--text-xs);
+  text-transform: uppercase; letter-spacing: var(--ls-wide); border-bottom-color: var(--border);
+}
+.content tbody tr:hover { background: var(--bg-hover); }
+.content td code { white-space: nowrap; }
+.filter-table { margin: var(--sp-4) 0; }
+.filter-input {
+  width: 100%; max-width: 320px; margin-bottom: var(--sp-2);
+  padding: var(--sp-2) var(--sp-3); font-family: inherit; font-size: var(--text-sm);
+  color: var(--text); background: var(--bg-card);
+  border: 1px solid var(--border); border-radius: var(--radius-sm);
+}
+.filter-input:focus { border-color: var(--accent); }
+
+/* ── Charts (:::chart) — label + proportional bar (fill carries inline width%) */
+.chart-block { margin: var(--sp-4) 0; }
+.chart-row {
+  display: grid; grid-template-columns: minmax(var(--chart-label-w), 24%) 1fr;
+  align-items: center; gap: var(--sp-3); margin: var(--sp-1) 0;
+}
+.chart-label {
+  font-size: var(--text-sm); color: var(--text-muted); text-align: right;
+  white-space: nowrap; overflow: hidden; text-overflow: ellipsis;
+}
+.chart-row .chart-bar {
+  height: 0.9em; min-width: 2px; background: var(--accent);
+  border-radius: var(--radius-sm);
+}
+
+/* ── Tabs (::::tabs / :::tab) ─────────────────────────────────────────────── */
+.tabs { margin: var(--sp-4) 0; }
+.tablist { display: flex; flex-wrap: wrap; gap: var(--sp-1); border-bottom: 1px solid var(--border); margin-bottom: var(--sp-3); }
+.tab-btn {
+  background: none; border: none; border-bottom: 2px solid transparent; margin-bottom: -1px;
+  padding: var(--sp-2) var(--sp-3); color: var(--text-muted);
+  font-family: inherit; font-size: var(--text-sm); font-weight: var(--fw-medium); cursor: pointer;
+}
+.tab-btn:hover { color: var(--text); }
+.tab-btn.active { color: var(--accent); border-bottom-color: var(--accent); }
+.tabpane { display: none; }
+.tabpane.active { display: block; }
+
+/* ── Mermaid diagrams ────────────────────────────────────────────────────── */
+.content figure { margin: var(--sp-4) 0; text-align: center; }
+.content figure svg, .content > svg, .content .mermaid svg { max-width: 100%; height: auto; }
+
+/* ── Index page: category card grid ──────────────────────────────────────── */
+.content .lead { color: var(--text-muted); font-size: var(--text-base); max-width: 60ch; margin-top: var(--sp-2); }
+.guide-cards {
+  display: grid; grid-template-columns: repeat(auto-fill, minmax(min(var(--card-min), 100%), 1fr));
+  gap: var(--sp-4); margin: var(--sp-4) 0 var(--sp-6);
+}
+.guide-card {
+  display: flex; flex-direction: column; gap: var(--sp-2);
+  padding: var(--sp-4); background: var(--bg-card);
+  border: 1px solid var(--border); border-radius: var(--radius);
+  color: inherit; text-decoration: none;
+  transition: border-color 0.15s ease, box-shadow 0.15s ease;
+}
+.guide-card:hover { border-color: var(--accent); box-shadow: var(--shadow-md); text-decoration: none; }
+.guide-card-title { font-weight: var(--fw-semi); color: var(--accent); font-size: var(--text-base); }
+.guide-card-desc { color: var(--text-muted); font-size: var(--text-sm); line-height: var(--lh-normal); }
+
+/* ── Responsive: TOC becomes an off-canvas drawer (chrome.ts toggles .open) ──*/
+/* 860px is literal — media queries cannot read custom properties. Revisit it if
+   --topbar-h / --rail-w / --drawer-w change (the drawer sticky offsets key off them). */
+@media (max-width: 860px) {
+  .nav-toggle { display: inline-flex; align-items: center; }
+  .layout { grid-template-columns: 1fr; gap: 0; }
+  .rail {
+    position: fixed; top: var(--topbar-h); left: 0; bottom: 0; width: var(--drawer-w); z-index: 50;
+    height: auto; background: var(--bg-card); border-right: 1px solid var(--border);
+    padding: var(--sp-4); box-shadow: var(--shadow-lg);
+    transform: translateX(-100%); transition: transform 0.2s ease, visibility 0.2s ease;
+    /* Closed drawer is off-screen AND removed from tab order / pointer events. */
+    visibility: hidden; pointer-events: none;
+  }
+  .rail.open { transform: translateX(0); visibility: visible; pointer-events: auto; }
+  .rail-close {
+    display: block; margin-left: auto; margin-bottom: var(--sp-2);
+    background: var(--bg-card); border: 1px solid var(--border); color: var(--text);
+    border-radius: var(--radius-sm); padding: var(--sp-1) var(--sp-3); font-size: var(--text-base);
+    line-height: 1; cursor: pointer; font-family: inherit;
+  }
+  .rail-close:hover { background: var(--bg-hover); border-color: var(--accent); }
+  .rail-close:focus-visible { outline: 2px solid var(--accent); outline-offset: 2px; }
+  .rail-backdrop {
+    display: block; position: fixed; inset: var(--topbar-h) 0 0 0;
+    background: var(--scrim); z-index: 49;
+    opacity: 0; pointer-events: none; transition: opacity 0.2s ease;
+  }
+  .rail.open ~ .rail-backdrop { opacity: 1; pointer-events: auto; }
+}
 </style>
 <script>(function(){try{var t=localStorage.getItem('guide-theme');if(!t&&window.matchMedia&&matchMedia('(prefers-color-scheme: dark)').matches)t='dark';if(t)document.documentElement.setAttribute('data-theme',t);}catch(e){}})();</script>
 </head>
 <body>
 <header class="topbar">
-  <button data-action="nav" class="nav-toggle" aria-label="Toggle navigation">☰</button>
+  <button data-action="nav" class="nav-toggle" aria-label="Toggle navigation"
+    aria-expanded="false" aria-controls="guide-toc">☰</button>
   <h1>Knowledge Freshness</h1>
   <button data-action="theme" class="theme-toggle" aria-label="Toggle theme">◐</button>
 </header>
 <div class="layout">
-  <aside class="rail"><nav class="toc" aria-label="Table of contents"><ul><li class="toc-2"><a href="#what-this-system-does">What this system does</a></li><li class="toc-3"><a href="#how-a-gap-closes">How a gap closes</a></li><li class="toc-2"><a href="#system-map">System map</a></li><li class="toc-2"><a href="#frontmatter-signals-and-resolution">Frontmatter, signals, and resolution</a></li><li class="toc-3"><a href="#frontmatter-schema">Frontmatter schema</a></li><li class="toc-3"><a href="#cadence-model">Cadence model</a></li><li class="toc-3"><a href="#adding-a-new-entry-to-the-kb">Adding a new entry to the KB</a></li><li class="toc-3"><a href="#gap-signal-payload">Gap-signal payload</a></li><li class="toc-3"><a href="#knowledgerootresolution-shape">KnowledgeRootResolution shape</a></li><li class="toc-2"><a href="#from-candidate-to-merged-pr">From candidate to merged PR</a></li><li class="toc-3"><a href="#prefilter">Prefilter</a></li><li class="toc-3"><a href="#audit-verdicts">Audit verdicts</a></li><li class="toc-3"><a href="#pr-generation">PR generation</a></li><li class="toc-3"><a href="#mmr-corroboration-manual">MMR corroboration (manual)</a></li><li class="toc-2"><a href="#the-five-pr-gates">The five PR gates</a></li><li class="toc-2"><a href="#lens-i-gap-detection-suppression">Lens I — gap detection + suppression</a></li><li class="toc-3"><a href="#threshold-matrix">Threshold matrix</a></li><li class="toc-3"><a href="#topic-normalization">Topic normalization</a></li><li class="toc-3"><a href="#what-the-lessonsmd-scanner-sees">What the lessons.md scanner sees</a></li><li class="toc-3"><a href="#3-tier---knowledge-root-resolution">3-tier --knowledge-root resolution</a></li><li class="toc-3"><a href="#warning-policy">Warning policy</a></li><li class="toc-3"><a href="#what-a-lens-i-finding-looks-like">What a Lens I finding looks like</a></li><li class="toc-2"><a href="#the-allowlist">The allowlist</a></li><li class="toc-3"><a href="#most-cited-hosts">Most-cited hosts</a></li><li class="toc-3"><a href="#the-full-allowlist">The full allowlist</a></li><li class="toc-3"><a href="#kb-inventory">KB inventory</a></li><li class="toc-3"><a href="#how-to-expand-the-allowlist">How to expand the allowlist</a></li><li class="toc-2"><a href="#anthropic-vs-deepseek-cron-uses-deepseek">Anthropic vs DeepSeek (cron uses DeepSeek)</a></li><li class="toc-2"><a href="#every-command-that-touches-the-system">Every command that touches the system</a></li><li class="toc-3"><a href="#refresh-arm-commands">Refresh-arm commands</a></li><li class="toc-3"><a href="#gap-arm-commands">Gap-arm commands</a></li><li class="toc-3"><a href="#gate-side-subcommands-also-runnable-locally-for-triage">Gate-side subcommands (also runnable locally for triage)</a></li><li class="toc-2"><a href="#operations-cheat-sheet">Operations cheat sheet</a></li><li class="toc-3"><a href="#an-entrys-audit-failed-in-the-cron">An entry's audit failed in the cron</a></li><li class="toc-3"><a href="#lens-i-keeps-surfacing-a-topic-the-kb-already-covers">Lens I keeps surfacing a topic the KB already covers</a></li><li class="toc-3"><a href="#downstream-auto-detect-cant-find-the-kb">Downstream auto-detect can't find the KB</a></li><li class="toc-3"><a href="#yaml-knowledge-root-stops-working-after-an-upgrade">Yaml knowledge_root stops working after an upgrade</a></li><li class="toc-3"><a href="#a-source-url-fetches-in-curl-but-the-cron-rejects-it">A source URL fetches in curl but the cron rejects it</a></li><li class="toc-3"><a href="#--knowledge-root-resolves-to-a-path-you-didnt-expect">--knowledge-root resolves to a path you didn't expect</a></li><li class="toc-2"><a href="#config-reference">Config reference</a></li><li class="toc-2"><a href="#roadmap-and-known-divergences">Roadmap and known divergences</a></li><li class="toc-3"><a href="#phase-5-planned">Phase 5 (planned)</a></li><li class="toc-3"><a href="#known-divergences">Known divergences</a></li></ul></nav></aside>
+  <aside class="rail" id="guide-toc">
+    <button class="rail-close" data-action="nav" aria-label="Close navigation">✕</button>
+    <nav class="toc" aria-label="Table of contents"><ul><li class="toc-2"><a href="#what-this-system-does">What this system does</a></li><li class="toc-3"><a href="#how-a-gap-closes">How a gap closes</a></li><li class="toc-2"><a href="#system-map">System map</a></li><li class="toc-2"><a href="#frontmatter-signals-and-resolution">Frontmatter, signals, and resolution</a></li><li class="toc-3"><a href="#frontmatter-schema">Frontmatter schema</a></li><li class="toc-3"><a href="#cadence-model">Cadence model</a></li><li class="toc-3"><a href="#adding-a-new-entry-to-the-kb">Adding a new entry to the KB</a></li><li class="toc-3"><a href="#gap-signal-payload">Gap-signal payload</a></li><li class="toc-3"><a href="#knowledgerootresolution-shape">KnowledgeRootResolution shape</a></li><li class="toc-2"><a href="#from-candidate-to-merged-pr">From candidate to merged PR</a></li><li class="toc-3"><a href="#prefilter">Prefilter</a></li><li class="toc-3"><a href="#audit-verdicts">Audit verdicts</a></li><li class="toc-3"><a href="#pr-generation">PR generation</a></li><li class="toc-3"><a href="#mmr-corroboration-manual">MMR corroboration (manual)</a></li><li class="toc-2"><a href="#the-five-pr-gates">The five PR gates</a></li><li class="toc-2"><a href="#lens-i-gap-detection-suppression">Lens I — gap detection + suppression</a></li><li class="toc-3"><a href="#threshold-matrix">Threshold matrix</a></li><li class="toc-3"><a href="#topic-normalization">Topic normalization</a></li><li class="toc-3"><a href="#what-the-lessonsmd-scanner-sees">What the lessons.md scanner sees</a></li><li class="toc-3"><a href="#3-tier---knowledge-root-resolution">3-tier --knowledge-root resolution</a></li><li class="toc-3"><a href="#warning-policy">Warning policy</a></li><li class="toc-3"><a href="#what-a-lens-i-finding-looks-like">What a Lens I finding looks like</a></li><li class="toc-2"><a href="#the-allowlist">The allowlist</a></li><li class="toc-3"><a href="#most-cited-hosts">Most-cited hosts</a></li><li class="toc-3"><a href="#the-full-allowlist">The full allowlist</a></li><li class="toc-3"><a href="#kb-inventory">KB inventory</a></li><li class="toc-3"><a href="#how-to-expand-the-allowlist">How to expand the allowlist</a></li><li class="toc-2"><a href="#anthropic-vs-deepseek-cron-uses-deepseek">Anthropic vs DeepSeek (cron uses DeepSeek)</a></li><li class="toc-2"><a href="#every-command-that-touches-the-system">Every command that touches the system</a></li><li class="toc-3"><a href="#refresh-arm-commands">Refresh-arm commands</a></li><li class="toc-3"><a href="#gap-arm-commands">Gap-arm commands</a></li><li class="toc-3"><a href="#gate-side-subcommands-also-runnable-locally-for-triage">Gate-side subcommands (also runnable locally for triage)</a></li><li class="toc-2"><a href="#operations-cheat-sheet">Operations cheat sheet</a></li><li class="toc-3"><a href="#an-entrys-audit-failed-in-the-cron">An entry's audit failed in the cron</a></li><li class="toc-3"><a href="#lens-i-keeps-surfacing-a-topic-the-kb-already-covers">Lens I keeps surfacing a topic the KB already covers</a></li><li class="toc-3"><a href="#downstream-auto-detect-cant-find-the-kb">Downstream auto-detect can't find the KB</a></li><li class="toc-3"><a href="#yaml-knowledge-root-stops-working-after-an-upgrade">Yaml knowledge_root stops working after an upgrade</a></li><li class="toc-3"><a href="#a-source-url-fetches-in-curl-but-the-cron-rejects-it">A source URL fetches in curl but the cron rejects it</a></li><li class="toc-3"><a href="#--knowledge-root-resolves-to-a-path-you-didnt-expect">--knowledge-root resolves to a path you didn't expect</a></li><li class="toc-2"><a href="#config-reference">Config reference</a></li><li class="toc-2"><a href="#roadmap-and-known-divergences">Roadmap and known divergences</a></li><li class="toc-3"><a href="#phase-5-planned">Phase 5 (planned)</a></li><li class="toc-3"><a href="#known-divergences">Known divergences</a></li></ul></nav>
+  </aside>
   <main class="content"><h2 id="what-this-system-does">What this system does</h2>
 <p>Knowledge entries under <code>content/knowledge/</code> declare a <code>volatility</code> tier and a
 list of <code>sources</code>. A daily cron prefilters at most ten entries that are <em>due</em> —
@@ -2111,13 +2392,13 @@ resolved by <code>resolveProvider</code> (<span class="fp" data-path="src/knowle
 <li>No env, <code>claude</code> on PATH → anthropic (subprocess uses keychain)</li>
 <li>Nothing → error (no provider configured)</li>
 </ol>
-<div class="tabs"><div class="tablist" role="tablist"><button class="tab-btn active" role="tab" data-tab="0">Anthropic</button><button class="tab-btn" role="tab" data-tab="1">DeepSeek</button></div><div class="tabpane active" data-tab="0"><p>Subprocess: <code>claude -p --tools ""</code> (empty-tools disables WebFetch so the model
+<div class="tabs"><div class="tablist" role="tablist"><button id="tab-0-0" class="tab-btn active" role="tab" data-tab="0" aria-controls="tabpane-0-0" aria-selected="true" tabindex="0">Anthropic</button><button id="tab-0-1" class="tab-btn" role="tab" data-tab="1" aria-controls="tabpane-0-1" aria-selected="false" tabindex="-1">DeepSeek</button></div><div id="tabpane-0-0" class="tabpane active" role="tabpanel" data-tab="0" aria-labelledby="tab-0-0" tabindex="0"><p>Subprocess: <code>claude -p --tools ""</code> (empty-tools disables WebFetch so the model
 can only read the prefetched bodies). <strong>Requires the <code>claude</code> CLI on PATH
 regardless of how the provider was chosen</strong> — the resolver throws
 (<span class="fp" data-path="src/knowledge-freshness/providers/index.ts:44-56">src/knowledge-freshness/providers/index.ts:44-56</span>) if anthropic is
 picked via flag, env, or API-key inference and <code>claude</code> isn't installed.
 <code>ANTHROPIC_API_KEY</code> alone is <em>not</em> sufficient. Source:
-<code>src/knowledge-freshness/providers/anthropic.ts</code>.</p></div><div class="tabpane" data-tab="1"><p>HTTP. No subprocess; works in CI without the Claude CLI.</p><ul>
+<code>src/knowledge-freshness/providers/anthropic.ts</code>.</p></div><div id="tabpane-0-1" class="tabpane" role="tabpanel" data-tab="1" aria-labelledby="tab-0-1" tabindex="0"><p>HTTP. No subprocess; works in CI without the Claude CLI.</p><ul>
 <li><strong>Auth:</strong> requires <code>DEEPSEEK_API_KEY</code>.</li>
 <li><strong>Default model:</strong> <code>deepseek-v4-flash</code>.</li>
 <li><strong>Override:</strong> set <code>KNOWLEDGE_FRESHNESS_DEEPSEEK_MODEL</code> to <code>deepseek-v4-pro</code>.
@@ -2344,6 +2625,7 @@ describes suppression in future tense; both have shipped.</li>
 <li><strong><code>www.</code> prefix inconsistency</strong> (P3) — mixed <code>www.</code> use in the allowlist; bare
 entries already auto-match subdomains, so the prefix is redundant.</li>
 </ul></main>
+  <div class="rail-backdrop" data-action="nav" aria-hidden="true"></div>
 </div>
 <script>(function(){
   var LS_KEY = 'guide-theme';
@@ -2362,12 +2644,69 @@ entries already auto-match subdomains, so the prefix is redundant.</li>
       });
     });
 
-    // ─── Mobile nav ──────────────────────────────────────────────────────────
+    // ─── Mobile nav (drawer + backdrop; aria-expanded + Escape-to-close) ──────
+    function setNav(open) {
+      var rail = document.querySelector('.rail');
+      if (rail) rail.classList.toggle('open', open);
+      var toggle = document.querySelector('.nav-toggle');
+      if (toggle) toggle.setAttribute('aria-expanded', open ? 'true' : 'false');
+      // Modal-drawer focus containment: while open, make the page content inert
+      // (out of tab order + a11y tree) and move focus into the drawer; on close,
+      // restore content and return focus to the toggle.
+      var main = document.querySelector('.content');
+      if (main) main.inert = open;
+      if (open) {
+        var first = rail && rail.querySelector('a, button, [tabindex]:not([tabindex="-1"])');
+        if (first) first.focus();
+        else if (rail) { rail.setAttribute('tabindex', '-1'); rail.focus(); }
+      } else if (toggle) {
+        toggle.focus();
+      }
+    }
+    // If the viewport grows past the mobile breakpoint while the drawer is open,
+    // the rail becomes the desktop sidebar and the toggle hides — clear the open
+    // state so .content doesn't stay inert with no way to close it.
+    if (window.matchMedia) {
+      var mq = window.matchMedia('(max-width: 860px)');
+      var onMq = function() {
+        if (mq.matches) return;
+        var rail = document.querySelector('.rail');
+        if (rail) rail.classList.remove('open');
+        var toggle = document.querySelector('.nav-toggle');
+        if (toggle) toggle.setAttribute('aria-expanded', 'false');
+        var main = document.querySelector('.content');
+        if (main) main.inert = false;
+      };
+      if (mq.addEventListener) mq.addEventListener('change', onMq);
+      else if (mq.addListener) mq.addListener(onMq);
+    }
     document.querySelectorAll('[data-action="nav"]').forEach(function(btn) {
       btn.addEventListener('click', function() {
         var rail = document.querySelector('.rail');
-        if (rail) rail.classList.toggle('open');
+        setNav(!(rail && rail.classList.contains('open')));
+      });
+    });
+    // Selecting a TOC link closes the drawer (so the now-active content isn't
+    // left inert behind the panel) before the anchor navigation scrolls.
+    var drawerRail = document.querySelector('.rail');
+    if (drawerRail) {
+      drawerRail.querySelectorAll('a').forEach(function(a) {
+        a.addEventListener('click', function() {
+          if (drawerRail.classList.contains('open')) setNav(false);
+        });
       });
+    }
+    document.addEventListener('keydown', function(e) {
+      var rail = document.querySelector('.rail');
+      if (!rail || !rail.classList.contains('open')) return;
+      if (e.key === 'Escape') { setNav(false); return; } // setNav restores focus to the toggle
+      // Trap Tab within the open drawer (modal pattern).
+      if (e.key !== 'Tab') return;
+      var f = rail.querySelectorAll('a[href], button, [tabindex]:not([tabindex="-1"])');
+      if (!f.length) return;
+      var first = f[0], last = f[f.length - 1];
+      if (e.shiftKey && document.activeElement === first) { e.preventDefault(); last.focus(); }
+      else if (!e.shiftKey && document.activeElement === last) { e.preventDefault(); first.focus(); }
     });
 
     // ─── Copy buttons ─────────────────────────────────────────────────────────
@@ -2394,17 +2733,31 @@ entries already auto-match subdomains, so the prefix is redundant.</li>
       wrapper.insertBefore(btn, pre);
     });
 
-    // ─── Tabs ─────────────────────────────────────────────────────────────────
+    // ─── Tabs (ARIA pattern: aria-selected + roving tabindex + arrow keys) ────
+    function activateTab(group, btn, focus) {
+      var idx = btn.getAttribute('data-tab');
+      group.querySelectorAll('.tab-btn').forEach(function(b) {
+        var on = b === btn;
+        b.classList.toggle('active', on);
+        b.setAttribute('aria-selected', on ? 'true' : 'false');
+        b.setAttribute('tabindex', on ? '0' : '-1');
+      });
+      group.querySelectorAll('.tabpane').forEach(function(pane) {
+        pane.classList.toggle('active', pane.getAttribute('data-tab') === idx);
+      });
+      if (focus) btn.focus();
+    }
     document.querySelectorAll('.tabs').forEach(function(group) {
-      group.querySelectorAll('.tab-btn').forEach(function(btn) {
-        btn.addEventListener('click', function() {
-          var idx = btn.getAttribute('data-tab');
-          group.querySelectorAll('.tab-btn').forEach(function(b) {
-            b.classList.toggle('active', b === btn);
-          });
-          group.querySelectorAll('.tabpane').forEach(function(pane) {
-            pane.classList.toggle('active', pane.getAttribute('data-tab') === idx);
-          });
+      var btns = [].slice.call(group.querySelectorAll('.tab-btn'));
+      btns.forEach(function(btn, i) {
+        btn.addEventListener('click', function() { activateTab(group, btn, false); });
+        btn.addEventListener('keydown', function(e) {
+          var ni = -1;
+          if (e.key === 'ArrowRight' || e.key === 'ArrowDown') ni = (i + 1) % btns.length;
+          else if (e.key === 'ArrowLeft' || e.key === 'ArrowUp') ni = (i - 1 + btns.length) % btns.length;
+          else if (e.key === 'Home') ni = 0;
+          else if (e.key === 'End') ni = btns.length - 1;
+          if (ni >= 0) { e.preventDefault(); activateTab(group, btns[ni], true); }
         });
       });
     });

package/content/guides/knowledge-freshness/index.md

@@ -665,7 +665,7 @@ resolved by `resolveProvider` (:cite[src/knowledge-freshness/providers/index.ts:
 6. Nothing → error (no provider configured)
 
 ::::tabs
-:::tab{title=Anthropic}
+:::tab{title="Anthropic"}
 Subprocess: `claude -p --tools ""` (empty-tools disables WebFetch so the model
 can only read the prefetched bodies). **Requires the `claude` CLI on PATH
 regardless of how the provider was chosen** — the resolver throws
@@ -674,7 +674,7 @@ picked via flag, env, or API-key inference and `claude` isn't installed.
 `ANTHROPIC_API_KEY` alone is *not* sufficient. Source:
 `src/knowledge-freshness/providers/anthropic.ts`.
 :::
-:::tab{title=DeepSeek}
+:::tab{title="DeepSeek"}
 HTTP. No subprocess; works in CI without the Claude CLI.
 
 - **Auth:** requires `DEEPSEEK_API_KEY`.