jamdesk 1.1.190 → 1.1.192

package/dist/lib/inert-config-keys.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"inert-config-keys.d.ts","sourceRoot":"","sources":["../../src/lib/inert-config-keys.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAYH,MAAM,WAAW,eAAe;IAAG,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;CAAE;AAgBlE,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,OAAO,GAAG,eAAe,EAAE,CA4BtE"}
+{"version":3,"file":"inert-config-keys.d.ts","sourceRoot":"","sources":["../../src/lib/inert-config-keys.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAYH,MAAM,WAAW,eAAe;IAAG,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;CAAE;AAsClE,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,OAAO,GAAG,eAAe,EAAE,CA8CtE"}

package/dist/lib/inert-config-keys.js

@@ -10,6 +10,25 @@ const ASYNC = 'AsyncAPI specs are not yet rendered — this key has no effect. '
     'Track: github.com/jamdesk/jamdesk-docs/issues/10';
 const MDX_SERVER = 'Only the first entry of api.mdx.server is used; the rest have no effect. ' +
     'Multi-server selection is available for openapi:-backed pages.';
+const OPENAPI_INERT_SHAPE = 'This openapi key generates no pages. Did you mean ' +
+    '"openapi": { "source": "<spec>", "generate": true }? A bare string, an ' +
+    'object without `generate: true`, or one missing `source`, is read by ' +
+    'nothing — every operation still needs its own committed .mdx. ' +
+    'Track: github.com/jamdesk/jamdesk-docs/issues/9';
+const OPENAPI_WRONG_LEVEL = 'Page generation from a spec is supported on navigation.tabs only, so this ' +
+    'openapi key has no effect. Move it onto the tab that owns these pages and ' +
+    'use { "source": "<spec>", "generate": true }. ' +
+    'Track: github.com/jamdesk/jamdesk-docs/issues/9';
+/** Mirrors `generatedSpecSource` in lib/openapi/expand-spec-pages.ts — the one
+ *  shape that actually materialises pages. Kept in step with it deliberately:
+ *  a hint that disagrees with the expander is worse than no hint. */
+function generatesPages(openapi) {
+    if (!isNode(openapi) || Array.isArray(openapi))
+        return false;
+    if (openapi.generate !== true)
+        return false;
+    return typeof openapi.source === 'string' && openapi.source.trim() !== '';
+}
 const CHILD_KEYS = ['tabs', 'anchors', 'groups', 'pages', 'dropdowns', 'products', 'menu'];
 export function findInertConfigKeys(config) {
     const out = [];
@@ -23,23 +42,41 @@ export function findInertConfigKeys(config) {
         out.push({ key: 'api.mdx.server', message: MDX_SERVER });
     }
     const seen = new Set(); // configs are author-written; refuse to trust them not to cycle
-    const walk = (nodes, path) => {
+    // `atTabLevel` marks the direct children of top-level navigation.tabs — the
+    // only place the expander looks. The index is in the path because a config
+    // with eight tabs got told `navigation.tabs.asyncapi` and had to find which.
+    const walk = (nodes, path, atTabLevel) => {
         if (!Array.isArray(nodes))
             return;
-        for (const n of nodes) {
+        nodes.forEach((n, i) => {
             if (!isNode(n) || seen.has(n))
-                continue;
+                return;
             seen.add(n);
+            const here = `${path}[${i}]`;
             if (n.asyncapi)
-                out.push({ key: `${path}.asyncapi`, message: ASYNC });
-            // Deliberately NOT warning on `n.openapi` — Task 17 implements it.
+                out.push({ key: `${here}.asyncapi`, message: ASYNC });
+            // Nav-level `openapi` is read by the page expander and by nothing else:
+            // navigation-resolver never looks at it, and resolveOpenApiSpec takes an
+            // explicit ref off page frontmatter or api.openapi. So any shape the
+            // expander rejects is silently doing nothing, which is exactly what #9
+            // was reported for — the config validated clean and produced no pages.
+            // Off a tab, EVERY shape is inert — including the correct one, which is
+            // the trap worth naming: an author who copies the documented
+            // `{source, generate: true}` onto an anchor gets a clean validate and no
+            // pages. So the shape only earns a pass at tab level.
+            if (n.openapi && (!atTabLevel || !generatesPages(n.openapi))) {
+                out.push({
+                    key: `${here}.openapi`,
+                    message: atTabLevel ? OPENAPI_INERT_SHAPE : OPENAPI_WRONG_LEVEL,
+                });
+            }
             for (const k of CHILD_KEYS)
-                walk(n[k], `${path}.${k}`);
-        }
+                walk(n[k], `${here}.${k}`, false);
+        });
     };
     const nav = isNode(config.navigation) ? config.navigation : {};
     for (const k of CHILD_KEYS)
-        walk(nav[k], `navigation.${k}`);
+        walk(nav[k], `navigation.${k}`, k === 'tabs');
     return out;
 }
 //# sourceMappingURL=inert-config-keys.js.map

package/dist/lib/inert-config-keys.js.map

@@ -1 +1 @@
-{"version":3,"file":"inert-config-keys.js","sourceRoot":"","sources":["../../src/lib/inert-config-keys.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAeH,MAAM,MAAM,GAAG,CAAC,CAAU,EAAa,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,CAAC;AAE9E,MAAM,KAAK,GACT,gEAAgE;IAChE,0EAA0E;IAC1E,kDAAkD,CAAC;AAErD,MAAM,UAAU,GACd,2EAA2E;IAC3E,gEAAgE,CAAC;AAEnE,MAAM,UAAU,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,CAAU,CAAC;AAEpG,MAAM,UAAU,mBAAmB,CAAC,MAAe;IACjD,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;QAAE,OAAO,GAAG,CAAC;IAEhC,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;IACxD,IAAI,GAAG,EAAE,QAAQ;QAAE,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,cAAc,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IAErE,MAAM,GAAG,GAAG,GAAG,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;IACzD,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxD,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,gBAAgB,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,GAAG,EAAQ,CAAC,CAAG,gEAAgE;IAChG,MAAM,IAAI,GAAG,CAAC,KAAc,EAAE,IAAY,EAAQ,EAAE;QAClD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO;QAClC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;gBAAE,SAAS;YACxC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACZ,IAAI,CAAC,CAAC,QAAQ;gBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,IAAI,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;YACtE,mEAAmE;YACnE,KAAK,MAAM,CAAC,IAAI,UAAU;gBAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC;QACzD,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/D,KAAK,MAAM,CAAC,IAAI,UAAU;QAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,cAAc,CAAC,EAAE,CAAC,CAAC;IAE5D,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"inert-config-keys.js","sourceRoot":"","sources":["../../src/lib/inert-config-keys.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAeH,MAAM,MAAM,GAAG,CAAC,CAAU,EAAa,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,CAAC;AAE9E,MAAM,KAAK,GACT,gEAAgE;IAChE,0EAA0E;IAC1E,kDAAkD,CAAC;AAErD,MAAM,UAAU,GACd,2EAA2E;IAC3E,gEAAgE,CAAC;AAEnE,MAAM,mBAAmB,GACvB,oDAAoD;IACpD,yEAAyE;IACzE,uEAAuE;IACvE,gEAAgE;IAChE,iDAAiD,CAAC;AAEpD,MAAM,mBAAmB,GACvB,4EAA4E;IAC5E,4EAA4E;IAC5E,gDAAgD;IAChD,iDAAiD,CAAC;AAEpD;;qEAEqE;AACrE,SAAS,cAAc,CAAC,OAAgB;IACtC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7D,IAAI,OAAO,CAAC,QAAQ,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC5C,OAAO,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;AAC5E,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,CAAU,CAAC;AAEpG,MAAM,UAAU,mBAAmB,CAAC,MAAe;IACjD,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;QAAE,OAAO,GAAG,CAAC;IAEhC,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;IACxD,IAAI,GAAG,EAAE,QAAQ;QAAE,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,cAAc,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IAErE,MAAM,GAAG,GAAG,GAAG,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;IACzD,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxD,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,gBAAgB,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,GAAG,EAAQ,CAAC,CAAG,gEAAgE;IAChG,4EAA4E;IAC5E,2EAA2E;IAC3E,6EAA6E;IAC7E,MAAM,IAAI,GAAG,CAAC,KAAc,EAAE,IAAY,EAAE,UAAmB,EAAQ,EAAE;QACvE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO;QAClC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YACrB,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;gBAAE,OAAO;YACtC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACZ,MAAM,IAAI,GAAG,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;YAC7B,IAAI,CAAC,CAAC,QAAQ;gBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,IAAI,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;YACtE,wEAAwE;YACxE,yEAAyE;YACzE,qEAAqE;YACrE,uEAAuE;YACvE,uEAAuE;YACvE,wEAAwE;YACxE,6DAA6D;YAC7D,yEAAyE;YACzE,sDAAsD;YACtD,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,UAAU,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;gBAC7D,GAAG,CAAC,IAAI,CAAC;oBACP,GAAG,EAAE,GAAG,IAAI,UAAU;oBACtB,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,mBAAmB;iBAChE,CAAC,CAAC;YACL,CAAC;YACD,KAAK,MAAM,CAAC,IAAI,UAAU;gBAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAChE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/D,KAAK,MAAM,CAAC,IAAI,UAAU;QAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,cAAc,CAAC,EAAE,EAAE,CAAC,KAAK,MAAM,CAAC,CAAC;IAE1E,OAAO,GAAG,CAAC;AACb,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jamdesk",
-  "version": "1.1.190",
+  "version": "1.1.192",
   "description": "CLI for Jamdesk — build, preview, and deploy documentation sites from MDX. Dev server with hot reload, 50+ components, OpenAPI support, AI search, and Mintlify migration",
   "keywords": [
     "jamdesk",

package/vendored/app/api/markdown-export/[project]/[...slug]/route.ts

@@ -112,7 +112,7 @@ export async function GET(
   // Arg order is load-bearing: `withDirective` is the agent-visible body the
   // footer is appended to; `raw` is the unfiltered source the helper reads
   // frontmatter from (visibility filtering never touches the leading YAML block).
-  const body = await withApiSpecsHint(
+  const hinted = await withApiSpecsHint(
     withDirective,
     raw,
     project,
@@ -120,6 +120,12 @@ export async function GET(
     request.headers,
     hostAtDocs,
   );
+  // Exactly one trailing newline. Text files end in one, and both paths into
+  // this body drop it: the footer string has no terminator, and the no-footer
+  // path returns whatever the source MDX happened to end with. 107 of snag's
+  // 115 exports shipped without it, so anything appending to or concatenating
+  // these files ran the last line of one into the next.
+  const body = `${hinted.replace(/\s+$/, '')}\n`;
 
   // Two paths reach this handler via proxy rewrite:
   //   (a) `.md` URL: unique CDN cache key, safe to share.

package/vendored/app/not-found.tsx

@@ -10,8 +10,29 @@ import type { DocsConfig } from '@/lib/docs-types';
 // chrome moved back to root layout, so this needs to match (was previously a
 // bare-html shell from the route-group world, which produced nested <html>
 // inside <main> when notFound() bubbled from app/[[...slug]]/page.tsx).
+// A 404 still gets crawled, linked and unfurled in chat, so it needs the same
+// three description surfaces every other page has. It previously set only a
+// title, which left og:description and twitter:description absent — an unfurl
+// of a dead docs link rendered as a bare title with no explanation.
+// Static because notFound() can fire before any project config is resolved
+// (placeholder shells, unknown tenants); nothing here may depend on a fetch.
+const NOT_FOUND_DESCRIPTION =
+  'This page does not exist. It may have been moved or renamed — use search or the navigation to find what you are looking for.';
+
 export const metadata = {
   title: 'Page not found',
+  description: NOT_FOUND_DESCRIPTION,
+  // Keep a 404 out of the index regardless of what the site-wide default says.
+  robots: { index: false, follow: true },
+  openGraph: {
+    title: 'Page not found',
+    description: NOT_FOUND_DESCRIPTION,
+  },
+  twitter: {
+    card: 'summary',
+    title: 'Page not found',
+    description: NOT_FOUND_DESCRIPTION,
+  },
 };
 
 export default async function NotFound() {

package/vendored/components/mdx/ApiMarkdown.tsx

@@ -1,5 +1,6 @@
 'use client';
 
+import type React from 'react';
 import ReactMarkdown from 'react-markdown';
 import remarkGfm from 'remark-gfm';
 
@@ -26,12 +27,17 @@ import remarkGfm from 'remark-gfm';
 export function ApiMarkdown({
   children,
   className,
+  style,
 }: {
   children: string;
   className: string;
+  /** The playground panel styles exclusively with inline CSS variables (see
+   *  PlaygroundParamForm's header), so it has no class to pass. Optional so
+   *  every other call site stays untouched. */
+  style?: React.CSSProperties;
 }) {
   return (
-    <div className={className}>
+    <div className={className} style={style}>
       <ReactMarkdown remarkPlugins={[[remarkGfm, { singleTilde: false }]]}>
         {children}
       </ReactMarkdown>

package/vendored/components/mdx/OpenApiEndpoint.tsx

@@ -9,6 +9,8 @@ import { useShikiHighlightMultiple } from '@/hooks/useShikiHighlight';
 import { preloadHighlighter } from '@/lib/shiki-client';
 import { ApiMarkdown, API_DESCRIPTION_PROSE } from './ApiMarkdown';
 import { resolveServerUrl } from '@/lib/openapi/resolve-server-url';
+
+
 import { getResponseExample } from '@/lib/openapi/response-examples';
 // Icons use Font Awesome CSS classes for lightweight rendering
 import type {
@@ -22,6 +24,12 @@ import type {
   ServerInfo,
 } from '@/lib/openapi/types';
 
+/** One key for the whole site: a reader who picks "Sandbox" means it for every
+ *  endpoint they then read, not just the one they were on. Session-scoped so it
+ *  never outlives the tab — a persisted prod/sandbox choice leaking into a
+ *  later visit is a worse surprise than re-picking. */
+const SERVER_CHOICE_KEY = 'jd:openapi:server-url';
+
 // Preload Shiki highlighter on module load
 if (typeof window !== 'undefined') {
   void preloadHighlighter();
@@ -846,6 +854,43 @@ export function OpenApiEndpoint({
   // than one (see the <select> below); index 0 otherwise, matching the
   // previous hardcoded servers[0] behaviour for every single-server site.
   const [serverIndex, setServerIndex] = useState(0);
+  // The choice is a reading preference, not page state. This useState is
+  // component-local and the router remounts it on every client-side
+  // navigation, so picking "Sandbox" and clicking the next endpoint silently
+  // put the reader back on servers[0] — with copy-paste examples to match.
+  //
+  // The stored value is the server URL, not the index: sibling endpoints can
+  // declare different server lists, and index 2 on one page is a different
+  // host on the next. A URL the current page does not offer simply loses,
+  // leaving the default.
+  //
+  // Hydrated in an effect rather than read during render: sessionStorage is
+  // not available on the server, so seeding useState from it would make the
+  // first client render disagree with the SSR HTML.
+  useEffect(() => {
+    if (servers.length < 2) return;
+    try {
+      const stored = window.sessionStorage.getItem(SERVER_CHOICE_KEY);
+      if (!stored) return;
+      const i = servers.findIndex((s) => resolveServerUrl(s) === stored);
+      if (i > 0) setServerIndex(i);
+    } catch {
+      // Private mode, or storage disabled — the default is a fine outcome.
+    }
+  }, [servers]);
+
+  const chooseServer = (i: number) => {
+    setServerIndex(i);
+    // resolveServerUrl is total over `undefined` and returns undefined for a
+    // server whose url is missing — nothing worth storing either way.
+    const picked = resolveServerUrl(servers[i]);
+    if (!picked) return;
+    try {
+      window.sessionStorage.setItem(SERVER_CHOICE_KEY, picked);
+    } catch {
+      // Non-fatal: the selection still applies to this page.
+    }
+  };
   const baseUrl = resolveServerUrl(servers[serverIndex]);
   // codeExamplesByServer is only ever populated for multi-server specs; the
   // ?? falls every existing caller (incl. inline-MDX) back to codeExamples.
@@ -909,7 +954,7 @@ export function OpenApiEndpoint({
           <select
             aria-label="API server"
             value={serverIndex}
-            onChange={(e) => setServerIndex(Number(e.target.value))}
+            onChange={(e) => chooseServer(Number(e.target.value))}
             className="min-w-0 max-w-full px-2 py-1 rounded-md border border-[var(--color-border)] bg-[var(--color-bg-primary)] text-[var(--color-text-primary)] text-xs appearance-none cursor-pointer"
           >
             {servers.map((s, i) => (

package/vendored/components/navigation/Sidebar.tsx

@@ -815,9 +815,15 @@ export function Sidebar({ config, layout = 'header-logo', tabsPosition: tabsPosi
 
   const showTopDivider = resolvedNav.externalAnchors.length > 0;
   const hasTopTabsBar = getTabsFromConfig(config, pathname || undefined).length > 1 && !showTabsInSidebar;
+  // `lg:max-h-full` caps the sidebar at the height of the layout row that holds
+  // it — LayoutWrapper has already subtracted the banner, the header and the
+  // tabs bar from that row. Without the cap, `self-start` sizes the <aside> to
+  // its content and the theme's scroller has to guess those heights off 100vh;
+  // the guess (57px header) was 7px short of the 64px the header actually
+  // renders, so the last nav item sat under the row's `lg:overflow-hidden`.
   const desktopSidebarClasses = layout === 'sidebar-logo'
     ? 'lg:fixed lg:top-[var(--jd-banner-height,0px)] lg:left-0 lg:bottom-0 lg:z-40'
-    : 'lg:sticky lg:self-start lg:z-30 lg:flex-shrink-0';
+    : 'lg:sticky lg:self-start lg:max-h-full lg:z-30 lg:flex-shrink-0';
 
   return (
     <>

package/vendored/lib/inert-config-keys.ts

@@ -22,6 +22,28 @@ const MDX_SERVER =
   'Only the first entry of api.mdx.server is used; the rest have no effect. ' +
   'Multi-server selection is available for openapi:-backed pages.';
 
+const OPENAPI_INERT_SHAPE =
+  'This openapi key generates no pages. Did you mean ' +
+  '"openapi": { "source": "<spec>", "generate": true }? A bare string, an ' +
+  'object without `generate: true`, or one missing `source`, is read by ' +
+  'nothing — every operation still needs its own committed .mdx. ' +
+  'Track: github.com/jamdesk/jamdesk-docs/issues/9';
+
+const OPENAPI_WRONG_LEVEL =
+  'Page generation from a spec is supported on navigation.tabs only, so this ' +
+  'openapi key has no effect. Move it onto the tab that owns these pages and ' +
+  'use { "source": "<spec>", "generate": true }. ' +
+  'Track: github.com/jamdesk/jamdesk-docs/issues/9';
+
+/** Mirrors `generatedSpecSource` in lib/openapi/expand-spec-pages.ts — the one
+ *  shape that actually materialises pages. Kept in step with it deliberately:
+ *  a hint that disagrees with the expander is worse than no hint. */
+function generatesPages(openapi: unknown): boolean {
+  if (!isNode(openapi) || Array.isArray(openapi)) return false;
+  if (openapi.generate !== true) return false;
+  return typeof openapi.source === 'string' && openapi.source.trim() !== '';
+}
+
 const CHILD_KEYS = ['tabs', 'anchors', 'groups', 'pages', 'dropdowns', 'products', 'menu'] as const;
 
 export function findInertConfigKeys(config: unknown): InertKeyWarning[] {
@@ -37,19 +59,37 @@ export function findInertConfigKeys(config: unknown): InertKeyWarning[] {
   }
 
   const seen = new Set<Node>();   // configs are author-written; refuse to trust them not to cycle
-  const walk = (nodes: unknown, path: string): void => {
+  // `atTabLevel` marks the direct children of top-level navigation.tabs — the
+  // only place the expander looks. The index is in the path because a config
+  // with eight tabs got told `navigation.tabs.asyncapi` and had to find which.
+  const walk = (nodes: unknown, path: string, atTabLevel: boolean): void => {
     if (!Array.isArray(nodes)) return;
-    for (const n of nodes) {
-      if (!isNode(n) || seen.has(n)) continue;
+    nodes.forEach((n, i) => {
+      if (!isNode(n) || seen.has(n)) return;
       seen.add(n);
-      if (n.asyncapi) out.push({ key: `${path}.asyncapi`, message: ASYNC });
-      // Deliberately NOT warning on `n.openapi` — Task 17 implements it.
-      for (const k of CHILD_KEYS) walk(n[k], `${path}.${k}`);
-    }
+      const here = `${path}[${i}]`;
+      if (n.asyncapi) out.push({ key: `${here}.asyncapi`, message: ASYNC });
+      // Nav-level `openapi` is read by the page expander and by nothing else:
+      // navigation-resolver never looks at it, and resolveOpenApiSpec takes an
+      // explicit ref off page frontmatter or api.openapi. So any shape the
+      // expander rejects is silently doing nothing, which is exactly what #9
+      // was reported for — the config validated clean and produced no pages.
+      // Off a tab, EVERY shape is inert — including the correct one, which is
+      // the trap worth naming: an author who copies the documented
+      // `{source, generate: true}` onto an anchor gets a clean validate and no
+      // pages. So the shape only earns a pass at tab level.
+      if (n.openapi && (!atTabLevel || !generatesPages(n.openapi))) {
+        out.push({
+          key: `${here}.openapi`,
+          message: atTabLevel ? OPENAPI_INERT_SHAPE : OPENAPI_WRONG_LEVEL,
+        });
+      }
+      for (const k of CHILD_KEYS) walk(n[k], `${here}.${k}`, false);
+    });
   };
 
   const nav = isNode(config.navigation) ? config.navigation : {};
-  for (const k of CHILD_KEYS) walk(nav[k], `navigation.${k}`);
+  for (const k of CHILD_KEYS) walk(nav[k], `navigation.${k}`, k === 'tabs');
 
   return out;
 }

package/vendored/lib/openapi/endpoint-to-markdown.ts

@@ -180,7 +180,15 @@ function describeScheme(name: string, scopes: unknown[], schemes: Record<string,
  *  one suffices); each entry is a set of schemes that all apply together. An
  *  operation's own `security` overrides the document default, and an explicit
  *  empty array means this endpoint takes no auth — which is worth stating,
- *  not worth omitting. Returns [] when neither level declares anything. */
+ *  not worth omitting.
+ *
+ *  ABSENT at both levels means the same thing as an explicit `[]`: OpenAPI
+ *  defines an operation with no `security` and no document default as carrying
+ *  no security requirement. This used to return [] instead, so six snag
+ *  operations shipped `.md` exports and llms-full entries with no
+ *  `## Authentication` section at all while their `security: []` siblings said
+ *  "No authentication required." — the same fact, told two different ways, and
+ *  an agent reading the silent one learns nothing about how to call it. */
 function securityLines(
   operationSecurity: unknown,
   specSecurity: unknown,
@@ -188,8 +196,7 @@ function securityLines(
 ): string[] {
   const security = Array.isArray(operationSecurity)
     ? operationSecurity
-    : (Array.isArray(specSecurity) ? specSecurity : null);
-  if (security === null) return [];
+    : (Array.isArray(specSecurity) ? specSecurity : []);
 
   const out: string[] = ['## Authentication', ''];
   if (security.length === 0) {
@@ -223,6 +230,29 @@ function resolveServerTemplate(server: { url?: string; variables?: Record<string
   return String(server.url).replace(/\{(\w+)\}/g, (_, key: string) => server.variables?.[key]?.default ?? `{${key}}`);
 }
 
+/** `schemaLines` bounded to `maxLines`, with the notice INSIDE the block.
+ *
+ *  The cap used to be applied once to the whole document, after every section
+ *  had been appended. A single huge schema therefore consumed the budget and
+ *  silently deleted every section that came after it — spec-declared
+ *  `## Response 403` sections vanished from `.md` exports and llms-full while
+ *  the rendered HTML page, which does not go through here, still showed them.
+ *  Agents reading the export concluded those endpoints could not fail.
+ *
+ *  Capping per schema keeps the same guard against the wide-DAG blowup the
+ *  DEFAULT_MAX_LINES comment describes (each block is bounded, so the document
+ *  is bounded by section count x maxLines) while letting every section the spec
+ *  declares actually appear. */
+function cappedSchemaLines(
+  schema: unknown,
+  opts: SchemaLinesOptions,
+  maxLines: number,
+): string[] {
+  const lines = schemaLines(schema, opts);
+  if (lines.length <= maxLines) return lines;
+  return [...lines.slice(0, maxLines), '', `… schema truncated at ${maxLines} lines.`];
+}
+
 /** Flatten a dereferenced OpenAPI operation into markdown: method/path,
  *  parameters grouped by location, request body and one `##` section per
  *  response status code. Every heading is a real `##` line — never bold —
@@ -283,7 +313,7 @@ export function endpointToMarkdown(operation: unknown, options: EndpointToMarkdo
     for (const [mime, media] of Object.entries(requestBody.content)) {
       out.push(`- Content type: \`${mime}\``);
       if (media && media.schema) {
-        out.push(...schemaLines(media.schema, { depth: 1, maxDepth, seen: new Set(), rootLabel: 'request body' }));
+        out.push(...cappedSchemaLines(media.schema, { depth: 1, maxDepth, seen: new Set(), rootLabel: 'request body' }, maxLines));
       }
     }
     out.push('');
@@ -300,7 +330,7 @@ export function endpointToMarkdown(operation: unknown, options: EndpointToMarkdo
       const content = response.content || {};
       for (const media of Object.values(content)) {
         if (media && media.schema) {
-          out.push(...schemaLines(media.schema, { depth: 1, maxDepth, seen: new Set(), rootLabel: 'response' }));
+          out.push(...cappedSchemaLines(media.schema, { depth: 1, maxDepth, seen: new Set(), rootLabel: 'response' }, maxLines));
         }
       }
       // Blank line per status, not once after the loop: without it the next
@@ -309,10 +339,6 @@ export function endpointToMarkdown(operation: unknown, options: EndpointToMarkdo
     }
   }
 
-  if (out.length > maxLines) {
-    out.length = maxLines;
-    out.push('', `… schema truncated at ${maxLines} lines.`);
-  }
   return out.join('\n').replace(/\n{3,}/g, '\n\n').trim();
 }
 

package/vendored/lib/openapi/operation-description.ts

@@ -43,9 +43,38 @@ export function stripMarkdownForMeta(text: string): string {
   s = s.replace(/`([^`]+)`/g, "$1"); // inline code -> its text
   s = s.replace(/!\[[^\]]*\]\([^)]*\)/g, " "); // images
   s = s.replace(/\[([^\]]+)\]\([^)]*\)/g, "$1"); // links -> link text
-  s = s.replace(/^[ \t]*[#>*\-+]+[ \t]*/gm, ""); // heading/quote/bullet markers
+  // Heading/quote/bullet markers. Asterisks are handled apart from the rest:
+  // `**Bold** at line start` is emphasis, not a bullet, and folding it into the
+  // marker class ate the OPENING run and left the closing `**` stranded in the
+  // output. A bullet needs whitespace after its marker; a rule is a run of
+  // three or more alone on the line.
+  s = s.replace(/^[ \t]*[#>\-+]+[ \t]*/gm, "");
+  s = s.replace(/^[ \t]*\*[ \t]+/gm, ""); // asterisk bullet: marker THEN space
+  s = s.replace(/^[ \t]*\*{3,}[ \t]*$/gm, " "); // horizontal rule
   s = s.replace(/^[ \t]*\d+\.[ \t]+/gm, ""); // ordered-list markers
-  s = s.replace(/[*~]+/g, ""); // emphasis runs (asterisk/tilde)
+  // GFM tables. The delimiter row is pure punctuation, and a description that
+  // opens with a table otherwise ships to <meta> as mostly pipes.
+  s = s.replace(/^[ \t]*\|?[ \t]*:?-{2,}:?[ \t]*(?:\|[ \t]*:?-{2,}:?[ \t]*)+\|?[ \t]*$/gm, " ");
+  s = s.replace(/^[ \t]*\|(.*)\|[ \t]*$/gm, (_m, row: string) =>
+    row.split("|").map((c) => c.trim()).filter(Boolean).join(" \u2014 "));
+  // Emphasis runs, ONLY where they actually delimit: the opening run must be
+  // followed by non-whitespace and the closing run preceded by it — the same
+  // flanking rule CommonMark uses to decide this is emphasis at all. A blanket
+  // /[*~]+/ deleted the literal asterisk in `*.jamdesk.app`, changing what the
+  // sentence MEANS on all four meta surfaces while the rendered page kept it.
+  // Same class of bug as the underscore rule below, and it bites harder: docs
+  // about wildcard domains, globs and multiplication are exactly the docs that
+  // carry a lone asterisk.
+  // Emphasis NESTS (`**bold with *italic* inside**`) and the content class
+  // cannot span the inner delimiter, so one pass only ever removes the
+  // innermost pair. Run to a fixed point; the bound is a guard, not a limit —
+  // real prose nests two deep.
+  for (let pass = 0; pass < 4; pass++) {
+    const before = s;
+    s = s.replace(/\*+(?=\S)([^*]*[^\s*])\*+/g, "$1");
+    s = s.replace(/~+(?=\S)([^~]*[^\s~])~+/g, "$1");
+    if (s === before) break;
+  }
   // Underscores ONLY where they delimit emphasis. A blanket /[_]+/ turned
   // `user_id` into `userid` — and API descriptions, the main source here, are
   // full of snake_case identifiers whose whole value is being copy-pasteable.

package/vendored/scripts/endpoint-to-markdown.cjs

@@ -146,12 +146,19 @@ function describeScheme(name, scopes, schemes) {
  *  one suffices); each entry is a set of schemes that all apply together. An
  *  operation's own `security` overrides the document default, and an explicit
  *  empty array means this endpoint takes no auth — which is worth stating,
- *  not worth omitting. Returns [] when neither level declares anything. */
+ *  not worth omitting.
+ *
+ *  ABSENT at both levels means the same thing as an explicit `[]`: OpenAPI
+ *  defines an operation with no `security` and no document default as carrying
+ *  no security requirement. This used to return [] instead, so six snag
+ *  operations shipped `.md` exports and llms-full entries with no
+ *  `## Authentication` section at all while their `security: []` siblings said
+ *  "No authentication required." — the same fact, told two different ways, and
+ *  an agent reading the silent one learns nothing about how to call it. */
 function securityLines(operationSecurity, specSecurity, schemes) {
   const security = Array.isArray(operationSecurity)
     ? operationSecurity
-    : (Array.isArray(specSecurity) ? specSecurity : null);
-  if (security === null) return [];
+    : (Array.isArray(specSecurity) ? specSecurity : []);
 
   const out = ['## Authentication', ''];
   if (security.length === 0) {
@@ -185,6 +192,15 @@ function resolveServerTemplate(server) {
   return String(server.url).replace(/\{(\w+)\}/g, (_, key) => (server.variables && server.variables[key] && server.variables[key].default) || `{${key}}`);
 }
 
+/** `schemaLines` bounded to `maxLines`, with the notice INSIDE the block.
+ *  Mirror of the TS twin — see lib/openapi/endpoint-to-markdown.ts for why the
+ *  cap is per schema and not per document. */
+function cappedSchemaLines(schema, opts, maxLines) {
+  const lines = schemaLines(schema, opts);
+  if (lines.length <= maxLines) return lines;
+  return [...lines.slice(0, maxLines), '', `… schema truncated at ${maxLines} lines.`];
+}
+
 /** Flatten a dereferenced OpenAPI operation into markdown: method/path,
  *  parameters grouped by location, request body and one `##` section per
  *  response status code. Every heading is a real `##` line — never bold —
@@ -238,7 +254,7 @@ function endpointToMarkdown(operation, options = {}) {
     for (const [mime, media] of Object.entries(operation.requestBody.content)) {
       out.push(`- Content type: \`${mime}\``);
       if (media && media.schema) {
-        out.push(...schemaLines(media.schema, { depth: 1, maxDepth, seen: new Set(), rootLabel: 'request body' }));
+        out.push(...cappedSchemaLines(media.schema, { depth: 1, maxDepth, seen: new Set(), rootLabel: 'request body' }, maxLines));
       }
     }
     out.push('');
@@ -254,7 +270,7 @@ function endpointToMarkdown(operation, options = {}) {
       const content = response.content || {};
       for (const media of Object.values(content)) {
         if (media && media.schema) {
-          out.push(...schemaLines(media.schema, { depth: 1, maxDepth, seen: new Set(), rootLabel: 'response' }));
+          out.push(...cappedSchemaLines(media.schema, { depth: 1, maxDepth, seen: new Set(), rootLabel: 'response' }, maxLines));
         }
       }
       // Blank line per status, not once after the loop: without it the next
@@ -263,10 +279,6 @@ function endpointToMarkdown(operation, options = {}) {
     }
   }
 
-  if (out.length > maxLines) {
-    out.length = maxLines;
-    out.push('', `… schema truncated at ${maxLines} lines.`);
-  }
   return out.join('\n').replace(/\n{3,}/g, '\n\n').trim();
 }
 

package/vendored/scripts/validate-links.cjs

@@ -79,7 +79,16 @@ const LINK_PATTERNS = [
 /**
  * Patterns to skip (external links, anchors, etc.)
  */
-function shouldSkipLink(href) {
+/** Facts that decide whether a build-time route could exist for THIS project.
+ *  Both were previously assumed true for everyone, so `broken-links` stayed
+ *  silent on two links that really do 404: `/docs/feed.xml` on a project that
+ *  does not host at /docs, and `/feed.xml` on a project where no page sets
+ *  `rss: true`. Defaults keep the permissive behaviour for callers that do not
+ *  pass facts (the exported helper is used directly in tests). */
+const PERMISSIVE_FACTS = { hostAtDocs: true, hasRssPage: true };
+
+function shouldSkipLink(href, facts) {
+  const { hostAtDocs, hasRssPage } = facts || PERMISSIVE_FACTS;
   if (!href) return true;
 
   // Skip external URLs
@@ -105,8 +114,14 @@ function shouldSkipLink(href) {
   // A project hosted at /docs writes these as `/docs/feed.xml`; resolveLink has
   // its own hostAtDocs branch for exactly this prefix. Strip one leading /docs
   // segment so the same five routes are recognised in both spellings.
-  const candidate = withoutFragment.replace(/^\/docs(?=\/)/, '');
-  if (GENERATED_ROUTES.has(candidate)) return true;
+  const candidate = hostAtDocs
+    ? withoutFragment.replace(/^\/docs(?=\/)/, '')
+    : withoutFragment;
+  if (GENERATED_ROUTES.has(candidate)) {
+    // feed.xml is the one route that is conditional on page content rather
+    // than on the project existing: no `rss: true` page, no feed.
+    return candidate === '/feed.xml' ? hasRssPage : true;
+  }
 
   // Skip image/asset paths (handles dimension syntax like =500x, =x200, =300x200)
   // Strips any trailing dimension suffix before checking extension
@@ -488,7 +503,7 @@ function getTargetHeadingSlugs(targetPath, contentDir, headingMap) {
 /**
  * Find all links in an MDX file and validate them
  */
-function validateFile(filePath, contentDir, results, headingMap) {
+function validateFile(filePath, contentDir, results, headingMap, facts) {
   const content = fs.readFileSync(filePath, 'utf8');
   const relativePath = path.relative(contentDir, filePath);
   const currentPagePath = relativePath.replace(/\.mdx$/, '');
@@ -527,7 +542,7 @@ function validateFile(filePath, contentDir, results, headingMap) {
       // Has path component — validate path first
       if (!linkPath) continue;
 
-      if (shouldSkipLink(linkPath)) continue;
+      if (shouldSkipLink(linkPath, facts)) continue;
 
       const targetPath = resolveLink(linkPath, filePath, contentDir);
       if (!targetPath) continue;
@@ -635,6 +650,38 @@ function validateNavigation(contentDir, navigationPages, results) {
  * Only validates pages that are part of docs.json navigation.
  * Files that exist but aren't in the navigation are ignored.
  */
+/** See PERMISSIVE_FACTS. Reads docs.json for the hosting prefix and scans page
+ *  frontmatter for a single `rss: true`. The scan is a raw regex rather than a
+ *  YAML parse on purpose: this runs over every navigation page and only needs
+ *  to answer "does any page opt into a feed". */
+function readSiteFacts(contentDir, navigationPages) {
+  let hostAtDocs = false;
+  try {
+    const cfg = JSON.parse(fs.readFileSync(path.join(contentDir, 'docs.json'), 'utf8'));
+    hostAtDocs = cfg.hostAtDocs === true;
+  } catch (e) {
+    // Invalid/missing docs.json is reported elsewhere; assume the root layout.
+  }
+
+  let hasRssPage = false;
+  for (const pagePath of navigationPages) {
+    for (const candidate of [
+      path.join(contentDir, pagePath + '.mdx'),
+      path.join(contentDir, pagePath, 'index.mdx'),
+    ]) {
+      if (!fs.existsSync(candidate)) continue;
+      try {
+        if (/^rss:[ \t]*true[ \t]*$/m.test(fs.readFileSync(candidate, 'utf8'))) {
+          hasRssPage = true;
+        }
+      } catch (e) { /* unreadable page is reported elsewhere */ }
+      break;
+    }
+    if (hasRssPage) break;
+  }
+  return { hostAtDocs, hasRssPage };
+}
+
 function validateProject(options) {
   options = options || {};
   const contentDir = getProjectDir();
@@ -649,6 +696,7 @@ function validateProject(options) {
 
   const navigationPages = getNavigationPages(contentDir);
   validateNavigation(contentDir, navigationPages, results);
+  const facts = readSiteFacts(contentDir, navigationPages);
 
   // Build heading map: use provided one or build from files
   const headingMap = options.headingMap || buildHeadingMapFromFiles(contentDir, navigationPages);
@@ -657,9 +705,9 @@ function validateProject(options) {
     const mdxPath = path.join(contentDir, pagePath + '.mdx');
     const indexPath = path.join(contentDir, pagePath, 'index.mdx');
     if (fs.existsSync(mdxPath)) {
-      validateFile(mdxPath, contentDir, results, headingMap);
+      validateFile(mdxPath, contentDir, results, headingMap, facts);
     } else if (fs.existsSync(indexPath)) {
-      validateFile(indexPath, contentDir, results, headingMap);
+      validateFile(indexPath, contentDir, results, headingMap, facts);
     }
   }
 
@@ -698,4 +746,4 @@ if (require.main === module) {
 // Export for programmatic use
 // generateSlug + createSlugger are exported for the drift test
 // (validate-links-slug.test.ts), which asserts they match the live github-slugger.
-module.exports = { validateProject, generateSlug, createSlugger, closestSlug, levenshtein, shouldSkipLink };
+module.exports = { validateProject, generateSlug, createSlugger, closestSlug, levenshtein, shouldSkipLink, readSiteFacts };

package/vendored/themes/halo/variables.css

@@ -575,19 +575,22 @@ body[data-theme="halo"] {
    height, and its <aside> is `lg:self-start` (height = content), so without a
    cap the nav grows unbounded and never scrolls once it's taller than the
    viewport. jam and nebula both carry this exact rule; halo's full-bleed rewrite
-   dropped it. Header is 57px tall; a top tab strip adds another 57px (114px). */
+   dropped it. */
 @media (min-width: 1024px) {
   body[data-theme="halo"] .sidebar-scroll {
     position: sticky !important;
-    flex: 0 0 auto !important;
-  }
-  body[data-theme="halo"] .sidebar-scroll[data-has-tabs="true"] {
-    top: 114px !important;
-    max-height: calc(100vh - 114px - var(--jd-banner-height, 0px)) !important;
-  }
-  body[data-theme="halo"] .sidebar-scroll[data-has-tabs="false"] {
-    top: 57px !important;
-    max-height: calc(100vh - 57px - var(--jd-banner-height, 0px)) !important;
+    top: 0 !important;
+    /* Fill the layout row, which LayoutWrapper has already sized to the space
+       left over after the banner, the header and the tabs bar. The rule this
+       replaces measured those back off 100vh with the header hardcoded at 57px
+       — it renders 64px — so the scroller overran its row by exactly 7px on
+       every desktop viewport and the row's `lg:overflow-hidden` clipped the
+       last nav item. Pairs with `lg:max-h-full` on the <aside>, which caps the
+       (content-sized, `self-start`) sidebar at the row height without changing
+       how a short nav renders. */
+    flex: 1 1 auto !important;
+    min-height: 0 !important;
+    max-height: none !important;
   }
 }
 

package/vendored/themes/jam/variables.css

@@ -721,21 +721,24 @@ body[data-theme="jam"] .sidebar-scroll .sidebar-nav-groups > div:first-child {
   }
 }
 
-/* Sidebar scroll container positioning for header-logo layout */
-/* The sidebar-scroll div needs constrained height to scroll independently */
-/* When tabs exist at top, sidebar needs more top offset (header 57px + tabs 57px = 114px) */
+/* Sidebar scroll container height cap for the header-logo layout — REQUIRED
+   for a tall nav to scroll. The shared markup gives .sidebar-scroll
+   `overflow-y-auto` but no bounded height, so the cap has to come from here. */
 @media (min-width: 1024px) {
   body[data-theme="jam"] .sidebar-scroll {
     position: sticky !important;
-    flex: 0 0 auto !important;
-  }
-  body[data-theme="jam"] .sidebar-scroll[data-has-tabs="true"] {
-    top: 114px !important;
-    max-height: calc(100vh - 114px - var(--jd-banner-height, 0px)) !important;
-  }
-  body[data-theme="jam"] .sidebar-scroll[data-has-tabs="false"] {
-    top: 57px !important;
-    max-height: calc(100vh - 57px - var(--jd-banner-height, 0px)) !important;
+    top: 0 !important;
+    /* Fill the layout row, which LayoutWrapper has already sized to the space
+       left over after the banner, the header and the tabs bar. The rule this
+       replaces measured those back off 100vh with the header hardcoded at 57px
+       — it renders 64px — so the scroller overran its row by exactly 7px on
+       every desktop viewport and the row's `lg:overflow-hidden` clipped the
+       last nav item. Pairs with `lg:max-h-full` on the <aside>, which caps the
+       (content-sized, `self-start`) sidebar at the row height without changing
+       how a short nav renders. */
+    flex: 1 1 auto !important;
+    min-height: 0 !important;
+    max-height: none !important;
   }
 }
 

package/vendored/themes/nebula/variables.css

@@ -214,21 +214,24 @@ body[data-theme="nebula"] .content-scroll::-webkit-scrollbar {
   display: none;
 }
 
-/* Sidebar scroll container positioning for header-logo layout */
-/* The sidebar-scroll div needs constrained height to scroll independently */
-/* When tabs exist at top, sidebar needs more top offset (header 57px + tabs 57px = 114px) */
+/* Sidebar scroll container height cap for the header-logo layout — REQUIRED
+   for a tall nav to scroll. The shared markup gives .sidebar-scroll
+   `overflow-y-auto` but no bounded height, so the cap has to come from here. */
 @media (min-width: 1024px) {
   body[data-theme="nebula"] .sidebar-scroll {
     position: sticky !important;
-    flex: 0 0 auto !important;
-  }
-  body[data-theme="nebula"] .sidebar-scroll[data-has-tabs="true"] {
-    top: 114px !important;
-    max-height: calc(100vh - 114px - var(--jd-banner-height, 0px)) !important;
-  }
-  body[data-theme="nebula"] .sidebar-scroll[data-has-tabs="false"] {
-    top: 57px !important;
-    max-height: calc(100vh - 57px - var(--jd-banner-height, 0px)) !important;
+    top: 0 !important;
+    /* Fill the layout row, which LayoutWrapper has already sized to the space
+       left over after the banner, the header and the tabs bar. The rule this
+       replaces measured those back off 100vh with the header hardcoded at 57px
+       — it renders 64px — so the scroller overran its row by exactly 7px on
+       every desktop viewport and the row's `lg:overflow-hidden` clipped the
+       last nav item. Pairs with `lg:max-h-full` on the <aside>, which caps the
+       (content-sized, `self-start`) sidebar at the row height without changing
+       how a short nav renders. */
+    flex: 1 1 auto !important;
+    min-height: 0 !important;
+    max-height: none !important;
   }
 }