wiki-formant 0.48.0 → 0.50.0

package/dist/analytics.d.ts

@@ -4,15 +4,6 @@ import { type HeaderReader, type RateLimitOptions } from './rate-limit.js';
  * Prisma: `(query, ...values) => prisma.$queryRawUnsafe(query, ...values)`.
  */
 export type Sql = (query: string, ...values: unknown[]) => Promise<unknown>;
-/** iPadOS reports itself as a Mac, so its views count as a computer's. */
-export declare const deviceOf: (ua: string) => "phone" | "tablet" | "computer";
-/**
- * Where a visit came from: its `utm_source` when the link carried one, else the
- * referring host, and null for a referrer that is this site or none.
- */
-export declare function sourceOf(referrer: unknown, utm: unknown, host: string): string | null;
-/** A browser path as stored: decoded, one leading slash, no trailing one. Null when it will not decode. */
-export declare function normalisePath(path: string): string | null;
 export interface ViewInput {
     /** The beacon request's headers: the address, browser, host and country come from them. */
     headers: HeaderReader;
@@ -22,8 +13,6 @@ export interface ViewInput {
     utm?: unknown;
     site?: string;
 }
-/** Count one page view, unless a bot sent it. Never rejects. */
-export declare function recordView(sql: Sql, { headers, path, referrer, utm, site }: ViewInput): Promise<void>;
 export interface EventInput {
     name: string;
     props?: Record<string, string | number>;
@@ -170,20 +159,6 @@ export interface SearchQueryInput {
     /** Which search box, when a site has more than one. */
     surface?: string;
 }
-/**
- * Props for a "Search Query" event – the human-side twin of `mcpCallProps`.
- *
- * A wiki instruments its agent surface and then counts every question an agent
- * asks while recording none of the questions a person asks. The queries that
- * return nothing are the valuable ones: they name a gap in the corpus in the
- * reader's own words, which is otherwise only ever guessed at.
- *
- * Returns `null` for a query with no content, so an empty field cannot fire an
- * event. The text is untrusted, so it is collapsed, lowercased for aggregation
- * and truncated – the same 64-character bound search itself applies, which
- * keeps the prop and the query that produced it the same string.
- */
-export declare function searchQueryProps({ query, results, surface, }: SearchQueryInput): Record<string, string> | null;
 export interface TrackerOptions {
     sql: Sql;
     /** `after` in Next: the write runs once the response has gone. */

package/dist/analytics.js

@@ -14,52 +14,9 @@
 //
 // The package owns the SQL; the app owns the connection. `Sql` is one function
 // that runs a parameterised statement, which Prisma, `pg` and postgres.js can
-// all supply in a line. The app declares the four tables in its own schema,
-// so `prisma db push` keeps them:
-//
-//   model View {
-//     id        BigInt   @id @default(autoincrement())
-//     siteId    String   @default("")
-//     path      String
-//     source    String?
-//     country   String?
-//     device    String
-//     visitor   String
-//     createdAt DateTime @default(now()) @db.Timestamptz(3)
-//     @@index([siteId, createdAt])
-//   }
-//
-//   model Event {
-//     id        BigInt   @id @default(autoincrement())
-//     siteId    String   @default("")
-//     name      String
-//     path      String?
-//     props     Json     @default("{}")
-//     visitor   String?
-//     createdAt DateTime @default(now()) @db.Timestamptz(3)
-//     @@index([siteId, name, createdAt])
-//   }
-//
-//   model Salt {
-//     day   String @id
-//     value String
-//   }
-//
-//   model ViewDay {
-//     siteId     String   @default("")
-//     day        DateTime @db.Date
-//     visitors   Int
-//     pageviews  Int
-//     visits     Int
-//     bounces    Int
-//     seconds    Int
-//     pages      Json     @default("{}")
-//     entryPages Json     @default("{}")
-//     sources    Json     @default("{}")
-//     countries  Json     @default("{}")
-//     devices    Json     @default("{}")
-//     @@id([siteId, day])
-//   }
+// all supply in a line. The four tables it needs are Prisma models shipped in
+// `prisma/analytics.prisma`, which the `prisma-models` bin copies into the
+// app's schema folder, so `prisma db push` keeps them.
 //
 // `ViewDay` holds days a site counted somewhere else before it counted its
 // own, one row a day with each breakdown as `{ value: visitors }`. Nothing
@@ -80,12 +37,14 @@ const KEEP_DAYS = 400;
 const DAY_MS = 86_400_000;
 /** A script that runs a page's JavaScript and says what it is. */
 const BOT = /bot|crawl|spider|slurp|headless|lighthouse|prerender|preview/i;
-/** iPadOS reports itself as a Mac, so its views count as a computer's. */
+/** iPadOS reports itself as a Mac, so its views count as a computer's. @internal */
 export const deviceOf = (ua) => /iPad|Tablet|Android(?!.*Mobile)/i.test(ua) ? 'tablet' : /Mobi|iPhone|Android/i.test(ua) ? 'phone' : 'computer';
 const bareHost = (host) => host.toLowerCase().replace(/:\d+$/, '').replace(/^www\./, '');
 /**
  * Where a visit came from: its `utm_source` when the link carried one, else the
  * referring host, and null for a referrer that is this site or none.
+ *
+ * @internal
  */
 export function sourceOf(referrer, utm, host) {
     if (typeof utm === 'string' && utm.trim())
@@ -100,7 +59,7 @@ export function sourceOf(referrer, utm, host) {
         return null;
     }
 }
-/** A browser path as stored: decoded, one leading slash, no trailing one. Null when it will not decode. */
+/** A browser path as stored: decoded, one leading slash, no trailing one. Null when it will not decode. @internal */
 export function normalisePath(path) {
     try {
         const p = decodeURIComponent(path.split(/[?#]/)[0].slice(0, 500));
@@ -136,7 +95,7 @@ async function visitorOf(sql, site, headers) {
 }
 /** Analytics must not be able to fail a response, so a failed write is logged and dropped. */
 const quietly = (task) => task().then(() => undefined, (e) => console.error(`analytics: ${e.message}`));
-/** Count one page view, unless a bot sent it. Never rejects. */
+/** Count one page view, unless a bot sent it. Never rejects. @internal */
 export function recordView(sql, { headers, path, referrer, utm, site = '' }) {
     const ua = headers.get('user-agent') ?? '';
     const page = normalisePath(path);
@@ -340,6 +299,8 @@ export function mcpCallProps(request, body, server) {
  * event. The text is untrusted, so it is collapsed, lowercased for aggregation
  * and truncated – the same 64-character bound search itself applies, which
  * keeps the prop and the query that produced it the same string.
+ *
+ * @internal
  */
 export function searchQueryProps({ query, results, surface, }) {
     const q = (query ?? '').replace(/\s+/g, ' ').trim().toLowerCase().slice(0, 64);

package/dist/base.css

@@ -40,6 +40,27 @@
   .columns-layout > .column-view { align-self: stretch; }
 }
 
+/* ---- the block views and the infobox ---------------------------------------
+   The structure three or four sites had each restated around this markup;
+   padding, gaps, radii and colour stay theirs. A stats block is two columns,
+   three or four from 40rem; a code-tab strip is a row of buttons; a banner sets
+   its icon beside its text; a long address in an infobox wraps. */
+.stat-grid { display: grid; grid-template-columns: repeat(2, minmax(0, 1fr)); }
+@media (min-width: 40rem) {
+  .stat-grid-3 { grid-template-columns: repeat(3, minmax(0, 1fr)); }
+  .stat-grid-4 { grid-template-columns: repeat(4, minmax(0, 1fr)); }
+}
+.stat-card { display: flex; flex-direction: column; }
+.code-tabs { overflow: hidden; }
+.code-tabs-list { display: flex; }
+.code-tabs-btn { cursor: pointer; }
+.editorial-banner { display: flex; }
+.infobox { overflow-wrap: anywhere; }
+.infobox-series { display: flex; flex-direction: column; }
+.heading-anchor,
+.ref-backlink,
+.reference-link { text-decoration: none; }
+
 /* ---- stored tab groups (activateTabGroups) --------------------------------
    Only the active panel shows. Before the script runs, the first tab's content
    stands in for the group rather than every tab at once. */
@@ -174,7 +195,7 @@ pre:hover > .code-copy-btn,
    `TimeChart`: the canvas, a loading or empty state over it, and the range and
    step buttons pinned to its top-left corner. A site gives the buttons and the
    box their look; pressed is all this marks. */
-.chart { position: relative; margin: 0; }
+.chart { position: relative; margin: 0; overflow: hidden; }
 /* Its own stacking context: the library's canvases stack themselves, and the buttons go over them. */
 .chart-canvas { position: relative; z-index: 0; height: var(--chart-height, 15rem); }
 /* The chart lays itself out in a <table>; a site's table styles are not for it. */
@@ -192,7 +213,7 @@ pre:hover > .code-copy-btn,
 .chart-controls > div { display: flex; gap: 2px; }
 /* A rule between groups: ranges, then steps, then the candles switch. */
 .chart-controls > * + * { border-inline-start: 1px solid color-mix(in srgb, currentColor 25%, transparent); padding-inline-start: 0.5rem; }
-.chart-controls :is(button, a) { font: inherit; color: inherit; text-decoration: none; background: none; cursor: pointer; opacity: 0.6; }
+.chart-controls :is(button, a) { padding: 0.125rem 0.375rem; font: inherit; color: inherit; text-decoration: none; background: none; cursor: pointer; opacity: 0.6; }
 /* An icon sits on the text's line, so an icon button is as tall as a labelled one. */
 .chart-icon { display: inline-block; width: 1em; height: 1em; vertical-align: -0.125em; }
 /* A button is pressed; a link (a stats page's window) is the page shown. */

package/dist/blocks.d.ts

@@ -1,5 +1,12 @@
 import { type RelativeTimeStyle } from './freshness.js';
 import type { BlockGroup } from './revisions.js';
+/**
+ * The languages a code block or code tab offers, and the one a new one opens
+ * on. Two wikis carried this list character for character; a wiki with its own
+ * passes it to `createCodeBlock` and its tab editor.
+ */
+export declare const CODE_LANGS: readonly ["javascript", "typescript", "css", "json", "bash", "python", "rust", "sql", "html", "xml", "jsx", "tsx", "markdown", "yaml", "toml"];
+export declare const DEFAULT_LANG = "rust";
 export interface CodeTab {
     label: string;
     language?: string;
@@ -137,14 +144,8 @@ export declare function someBlock<B>(blocks: readonly B[], predicate: (block: B)
  * contains a fence cannot close this one early.
  */
 export declare function codeTabsToMarkdown(tabs: readonly CodeTab[]): string;
-/** A maintenance notice as a blockquote. `label` is the caller's display string. */
-export declare function bannerToMarkdown(label: string, text?: string | null): string;
-/** A numbered citation list, or `''` when there is nothing to cite. */
-export declare function referencesToMarkdown(items: readonly ReferenceItem[], title?: string): string;
 /** Metric cards as a bullet list, or `''` when empty. */
 export declare function statsToMarkdown(items: readonly StatItem[]): string;
-/** Grouped links under their headings, with an optional lead paragraph. */
-export declare function linkGridToMarkdown(groups: readonly LinkGridGroup[], intro?: string | null): string;
 /** A flat bullet list of links — resolved page lists, feed items, link rails. */
 export declare function linkList(items: readonly LinkGridLink[]): string;
 /**

package/dist/blocks.js

@@ -13,6 +13,14 @@
 import { htmlToMarkdown, inlineToMarkdown } from './markdown.js';
 import { relativeTime } from './freshness.js';
 import { BANNER_LABELS, bannerToText, codeTabsToText, linkGridToText, pageListToText, referencesToText, statsToText, stripHtml, } from './text.js';
+// ---- the shapes the standard block types carry ------------------------------
+/**
+ * The languages a code block or code tab offers, and the one a new one opens
+ * on. Two wikis carried this list character for character; a wiki with its own
+ * passes it to `createCodeBlock` and its tab editor.
+ */
+export const CODE_LANGS = ['javascript', 'typescript', 'css', 'json', 'bash', 'python', 'rust', 'sql', 'html', 'xml', 'jsx', 'tsx', 'markdown', 'yaml', 'toml'];
+export const DEFAULT_LANG = 'rust';
 export function pageRef(page, now, style = 'long') {
     return {
         title: page.title,
@@ -163,11 +171,11 @@ export function codeTabsToMarkdown(tabs) {
     })
         .join('\n\n');
 }
-/** A maintenance notice as a blockquote. `label` is the caller's display string. */
+/** A maintenance notice as a blockquote. `label` is the caller's display string. @internal */
 export function bannerToMarkdown(label, text) {
     return `> **[${label}]**${text ? ` ${inlineToMarkdown(text)}` : ''}`;
 }
-/** A numbered citation list, or `''` when there is nothing to cite. */
+/** A numbered citation list, or `''` when there is nothing to cite. @internal */
 export function referencesToMarkdown(items, title = 'References') {
     if (!items.length)
         return '';
@@ -180,7 +188,7 @@ export function statsToMarkdown(items) {
         return '';
     return items.map(s => `- **${s.value}${s.suffix ?? ''}** — ${s.label}`).join('\n');
 }
-/** Grouped links under their headings, with an optional lead paragraph. */
+/** Grouped links under their headings, with an optional lead paragraph. @internal */
 export function linkGridToMarkdown(groups, intro) {
     const lead = intro ? `${inlineToMarkdown(intro)}\n\n` : '';
     const rendered = groups.map(g => [

package/dist/chart.d.ts

@@ -35,19 +35,6 @@ export declare function chartSteps(span: number): {
     steps: ChartStep[];
     fallback: ChartStep;
 };
-/**
- * Points, oldest first, one per step. A price keeps the last value in each
- * step, as a candle does its close: the first open, the highest high, the
- * lowest low. A count takes the mean of its days, so the week in progress does
- * not read as a collapse. Volume is summed.
- */
-export declare function bucketChart(points: readonly ChartPoint[], step: ChartStep, aggregate: 'last' | 'mean'): ChartPoint[];
-/**
- * Markers on the points drawn: each on the last point at or before it, so one
- * mid-week sits on its week. Markers on one point share it, labels joined; one
- * before the first point or after the last point's step is left off.
- */
-export declare function placeMarkers(markers: readonly ChartMarker[], shown: readonly ChartPoint[], step: ChartStep | null): ChartMarker[];
 /** Compact from a thousand up, four significant figures below. */
 export declare const formatChartValue: (n: number) => string;
 export interface TimeChartProps {

package/dist/chart.js

@@ -50,6 +50,8 @@ function bucketStart(time, step) {
  * step, as a candle does its close: the first open, the highest high, the
  * lowest low. A count takes the mean of its days, so the week in progress does
  * not read as a collapse. Volume is summed.
+ *
+ * @internal
  */
 export function bucketChart(points, step, aggregate) {
     const out = [];
@@ -79,6 +81,8 @@ export function bucketChart(points, step, aggregate) {
  * Markers on the points drawn: each on the last point at or before it, so one
  * mid-week sits on its week. Markers on one point share it, labels joined; one
  * before the first point or after the last point's step is left off.
+ *
+ * @internal
  */
 export function placeMarkers(markers, shown, step) {
     const first = shown[0];

package/dist/combobox.d.ts

@@ -43,10 +43,6 @@ export interface ComboboxAria {
     listProps: ComboboxListProps;
     optionProps: (index: number) => ComboboxOptionProps;
 }
-/** The id of one option row. Exported because a caller that scrolls the
- *  highlighted row into view has to find it by the same id the input points at. */
-export declare function optionId(baseId: string, listKey: string | undefined, index: number): string;
-export declare function listId(baseId: string, listKey?: string): string;
 /**
  * Every attribute the three parts of a combobox need, derived from what the
  * typeahead already knows.

package/dist/combobox.js

@@ -12,9 +12,11 @@
 // Enter does.
 /** The id of one option row. Exported because a caller that scrolls the
  *  highlighted row into view has to find it by the same id the input points at. */
+/** @internal */
 export function optionId(baseId, listKey, index) {
     return `${listId(baseId, listKey)}-opt-${index}`;
 }
+/** @internal */
 export function listId(baseId, listKey) {
     return listKey ? `${baseId}-${listKey}` : `${baseId}-list`;
 }

package/dist/crawlers.d.ts

@@ -12,15 +12,6 @@ export interface AiCrawler {
      */
     fetches: boolean;
 }
-/**
- * Order is significant: `detectAiBot` returns the first token the user agent
- * contains, so a token that is a substring of another must come after it.
- */
-export declare const AI_CRAWLERS: readonly AiCrawler[];
-/** The event label for a user agent, or null when it is not a known crawler. */
-export declare function detectAiBot(userAgent: string | null | undefined): string | null;
-/** Every token that needs its own robots.txt group — which is all of them. */
-export declare function aiCrawlerTokens(): string[];
 /**
  * Structurally what Next's `MetadataRoute.Robots['rules']` wants, without
  * importing Next: this package has no runtime dependencies and is not going to
@@ -31,21 +22,6 @@ export interface RobotsGroup {
     allow?: string | string[];
     disallow?: string | string[];
 }
-/**
- * The agent surface an S10 origin serves, allowed in every group. All three
- * `robots.ts` files listed these by hand, and a path missing from one list is
- * an endpoint the origin advertises and then closes to the callers it named.
- */
-export declare const AGENT_SURFACE_PATHS: readonly string[];
-/**
- * The React Server Components payload a `<Link>` prefetches. A crawler that
- * renders a page runs those prefetches too — 43% of Googlebot's requests on
- * one wiki, against 10% for HTML — and nothing that reads robots.txt can use
- * one. Every group gets it.
- */
-export declare const RSC_DISALLOW: readonly string[];
-/** The search engines that get the HTML site and none of its twins. */
-export declare const SEARCH_ENGINES: readonly string[];
 /**
  * Every group robots.txt needs: the wildcard, one per AI crawler, one per
  * search engine.

package/dist/crawlers.js

@@ -14,6 +14,8 @@
 /**
  * Order is significant: `detectAiBot` returns the first token the user agent
  * contains, so a token that is a substring of another must come after it.
+ *
+ * @internal
  */
 export const AI_CRAWLERS = [
     { token: 'GPTBot', label: 'GPTBot', fetches: true },
@@ -39,7 +41,7 @@ export const AI_CRAWLERS = [
     { token: 'DuckAssistBot', label: 'DuckAssistBot', fetches: true },
     { token: 'Applebot-Extended', label: 'AppleExtended', fetches: false },
 ];
-/** The event label for a user agent, or null when it is not a known crawler. */
+/** The event label for a user agent, or null when it is not a known crawler. @internal */
 export function detectAiBot(userAgent) {
     if (!userAgent)
         return null;
@@ -49,7 +51,7 @@ export function detectAiBot(userAgent) {
     }
     return null;
 }
-/** Every token that needs its own robots.txt group — which is all of them. */
+/** Every token that needs its own robots.txt group — which is all of them. @internal */
 export function aiCrawlerTokens() {
     return AI_CRAWLERS.map(c => c.token);
 }
@@ -57,6 +59,8 @@ export function aiCrawlerTokens() {
  * The agent surface an S10 origin serves, allowed in every group. All three
  * `robots.ts` files listed these by hand, and a path missing from one list is
  * an endpoint the origin advertises and then closes to the callers it named.
+ *
+ * @internal
  */
 export const AGENT_SURFACE_PATHS = [
     '/api/mcp',
@@ -71,9 +75,11 @@ export const AGENT_SURFACE_PATHS = [
  * renders a page runs those prefetches too — 43% of Googlebot's requests on
  * one wiki, against 10% for HTML — and nothing that reads robots.txt can use
  * one. Every group gets it.
+ *
+ * @internal
  */
 export const RSC_DISALLOW = ['/*?_rsc=', '/*&_rsc='];
-/** The search engines that get the HTML site and none of its twins. */
+/** The search engines that get the HTML site and none of its twins. @internal */
 export const SEARCH_ENGINES = ['Googlebot', 'Bingbot'];
 /**
  * Every group robots.txt needs: the wildcard, one per AI crawler, one per

package/dist/dom.d.ts

@@ -17,11 +17,6 @@ export interface CopyButtonOptions {
  * Returns the number of buttons added, so a caller can skip work when zero.
  */
 export declare function addCopyButtons(root: ParentNode, options?: CopyButtonOptions): number;
-/**
- * The one place this origin is written down. It is both the embed host and the
- * allow-list the resize listener checks.
- */
-export declare const TWITTER_ORIGIN = "https://platform.twitter.com";
 /** The embed iframe's src. `dnt=true` opts the embed out of Twitter's tracking. */
 export declare const tweetEmbedSrc: (tweetId: string | number) => string;
 /**

package/dist/dom.js

@@ -56,6 +56,8 @@ export function addCopyButtons(root, options = {}) {
 /**
  * The one place this origin is written down. It is both the embed host and the
  * allow-list the resize listener checks.
+ *
+ * @internal
  */
 export const TWITTER_ORIGIN = 'https://platform.twitter.com';
 /** The embed iframe's src. `dnt=true` opts the embed out of Twitter's tracking. */

package/dist/editor.d.ts

@@ -15,19 +15,6 @@ export type { StarterKitOptions } from '@tiptap/starter-kit';
 export type { LinkOptions } from '@tiptap/extension-link';
 export type { ImageOptions } from '@tiptap/extension-image';
 export type { TableOptions } from '@tiptap/extension-table';
-/**
- * Tiptap's Link, storing an href and the `link` class and nothing else.
- *
- * Stock Link writes `target="_blank" rel="noopener noreferrer nofollow"` onto
- * every link, internal ones included, and the schema then reads both back from
- * stored HTML, so a page edited once kept them for good. Nofollow on a site's
- * own links throws away its link equity, and a new tab for in-site navigation
- * is a bug. Whether a link is external depends on the host it is served from,
- * which the editor cannot know, so the render path decides: `normaliseLinks`
- * from `wiki-formant/links`. Dropping both attributes from the mark also cleans
- * a legacy link the next time its page is saved.
- */
-export declare const wikiLink: import("@tiptap/core").Mark<import("@tiptap/extension-link").LinkOptions, any>;
 export interface WikiEditorExtensionOptions {
     /** Empty-document prompt. */
     placeholder?: string;
@@ -41,20 +28,6 @@ export interface WikiEditorExtensionOptions {
      */
     nodes?: readonly AnyExtension[];
 }
-/**
- * Turn a pasted URL into the richest node that fits it, falling back to a bare
- * iframe. Order matters: a YouTube URL is also a valid iframe source, so the
- * specific cases have to be tried before the general one.
- *
- * A shortened map link inserts IMMEDIATELY with `about:blank` and swaps its
- * `src` once the redirect resolves. Pasting must not block on a network hop,
- * and the node has to already exist for the reader to see anything happen. The
- * swap re-finds the node by its `url` attribute rather than caching a position,
- * because every keystroke between the paste and the resolve moves it.
- */
-export declare function insertEmbed(editor: Editor, url: string, { resolveMapUrl }: {
-    resolveMapUrl: (url: string) => Promise<string | null>;
-}): void;
 /** The table controls, shown only while the selection is inside a table. */
 export declare const TABLE_ACTIONS: ReadonlyArray<[command: string, label: string, danger?: boolean]>;
 /** `editor.isActive` as a toolbar button's `active` descriptor expresses it. */
@@ -71,13 +44,6 @@ export interface ToolbarAction {
     run?: (editor: Editor) => void;
     withUrl?: (editor: Editor, url: string) => void;
 }
-/**
- * The formatting commands, labelled. Three toolbars ran these identically and
- * two titled their buttons with the internal key — a screen reader said
- * "codeBlock", and inline code and code block shared one icon and one name.
- * Upload and embed stay with the caller: they are the parts that differ.
- */
-export declare const TOOLBAR_ACTIONS: readonly ToolbarAction[];
 /** The actions a toolbar shows, in the order it shows them. */
 export declare function toolbarActions(keys: readonly ToolbarKey[]): ToolbarAction[];
 /**
@@ -92,15 +58,6 @@ export declare function ToolbarButton({ label, pressed, onPress, className, chil
     children: ReactNode;
 }): import("react").JSX.Element;
 export type UrlPromptKind = 'link' | 'embed';
-/**
- * What a link or embed field does with its address. A link sets or replaces
- * the link the cursor is in, across the whole link rather than the collapsed
- * selection, and an emptied address takes it off while keeping the text. An
- * embed with no address does nothing.
- */
-export declare function applyUrlPrompt(editor: Editor, kind: UrlPromptKind, url: string, { resolveMapUrl }: {
-    resolveMapUrl: (url: string) => Promise<string | null>;
-}): void;
 export interface UrlPromptState {
     /** The open field, or null. */
     kind: UrlPromptKind | null;

package/dist/editor.js

@@ -71,6 +71,8 @@ function cleanPastedHtml(html) {
  * which the editor cannot know, so the render path decides: `normaliseLinks`
  * from `wiki-formant/links`. Dropping both attributes from the mark also cleans
  * a legacy link the next time its page is saved.
+ *
+ * @internal
  */
 export const wikiLink = TiptapLink.extend({
     addAttributes() {
@@ -117,7 +119,7 @@ const SHORT_MAP = /maps\.app\.goo\.gl|goo\.gl\/maps/;
  * swap re-finds the node by its `url` attribute rather than caching a position,
  * because every keystroke between the paste and the resolve moves it.
  */
-export function insertEmbed(editor, url, { resolveMapUrl }) {
+function insertEmbed(editor, url, { resolveMapUrl }) {
     const yt = url.match(YOUTUBE);
     if (yt) {
         editor.chain().focus().setYoutubeVideo({ src: url }).run();
@@ -168,6 +170,8 @@ export function runTableAction(editor, command) {
  * two titled their buttons with the internal key — a screen reader said
  * "codeBlock", and inline code and code block shared one icon and one name.
  * Upload and embed stay with the caller: they are the parts that differ.
+ *
+ * @internal
  */
 export const TOOLBAR_ACTIONS = [
     { key: 'bold', label: 'Bold', active: 'bold', run: e => e.chain().focus().toggleBold().run() },
@@ -220,6 +224,8 @@ export function ToolbarButton({ label, pressed, onPress, className, children, })
  * the link the cursor is in, across the whole link rather than the collapsed
  * selection, and an emptied address takes it off while keeping the text. An
  * embed with no address does nothing.
+ *
+ * @internal
  */
 export function applyUrlPrompt(editor, kind, url, { resolveMapUrl }) {
     const href = url.trim();

package/dist/feed.d.ts

@@ -1,10 +1,4 @@
 export declare const escXml: (s: string) => string;
-/**
- * `content:encoded` carries raw HTML, so it travels inside CDATA. A literal
- * `]]>` in the body would close the section early and corrupt every item after
- * it — not just the one that contained it.
- */
-export declare const cdata: (html: string) => string;
 /**
  * Aggregators hard-truncate a description around 150 characters. Trimming on a
  * word boundary first means the cut lands between words rather than inside one.
@@ -45,14 +39,6 @@ export interface FeedChannel {
      */
     lastBuild?: Date | null;
 }
-/**
- * `lastBuildDate` comes from the newest item, not from the clock.
- *
- * A feed whose build date moves on every request tells every poller it changed
- * when it did not, which is exactly the recrawl the conditional-GET helpers
- * exist to prevent. An empty feed has no build date rather than a fictional one.
- */
-export declare function renderFeed(channel: FeedChannel, items: readonly FeedItem[]): string;
 /**
  * The feed as a response, with the validators a poller revalidates against.
  *

package/dist/feed.js

@@ -28,6 +28,8 @@ export const escXml = (s) => s.replace(/[&<>"']/g, c => XML_ESCAPES[c] ?? c);
  * `content:encoded` carries raw HTML, so it travels inside CDATA. A literal
  * `]]>` in the body would close the section early and corrupt every item after
  * it — not just the one that contained it.
+ *
+ * @internal
  */
 export const cdata = (html) => `<![CDATA[${html.replace(/]]>/g, ']]&gt;')}]]>`;
 /**
@@ -69,6 +71,8 @@ export function renderItem(item) {
  * A feed whose build date moves on every request tells every poller it changed
  * when it did not, which is exactly the recrawl the conditional-GET helpers
  * exist to prevent. An empty feed has no build date rather than a fictional one.
+ *
+ * @internal
  */
 export function renderFeed(channel, items) {
     const newest = lastBuild(channel, items);

package/dist/freshness.d.ts

@@ -4,7 +4,6 @@ export interface FreshnessInput {
     lastVerifiedAt?: Date | string | null;
     updatedAt?: Date | string | null;
 }
-export declare const DEFAULT_MAX_AGE_DAYS = 180;
 /** Whole days between `date` and `now`, or null when there is no usable date. */
 export declare function daysSince(date: Date | string | null | undefined, now: number): number | null;
 /**
@@ -13,12 +12,6 @@ export declare function daysSince(date: Date | string | null | undefined, now: n
  * edit is a weaker signal than a verification, but it is a signal.
  */
 export declare function isStale(page: FreshnessInput, now: number, maxAgeDays?: number): boolean;
-/**
- * The sentence the notice carries. Both wikis shipped this string identically,
- * down to the ISO date and the closing request, so it lives here rather than
- * being re-typed either side of the extraction.
- */
-export declare function freshnessNotice(page: FreshnessInput): string;
 /**
  * A synthetic `outdated` banner block for a stale page, or null when it is
  * fresh — the shape every wiki's `banner` type already stores, so it drops

package/dist/freshness.js

@@ -10,6 +10,7 @@
 // disagree with the one the server just sent.
 import { isoDate } from './html.js';
 export { isoDate };
+/** @internal */
 export const DEFAULT_MAX_AGE_DAYS = 180;
 const DAY_MS = 86_400_000;
 /** Whole days between `date` and `now`, or null when there is no usable date. */
@@ -34,6 +35,8 @@ export function isStale(page, now, maxAgeDays = DEFAULT_MAX_AGE_DAYS) {
  * The sentence the notice carries. Both wikis shipped this string identically,
  * down to the ISO date and the closing request, so it lives here rather than
  * being re-typed either side of the extraction.
+ *
+ * @internal
  */
 export function freshnessNotice(page) {
     const when = page.lastVerifiedAt

package/dist/headers.d.ts

@@ -9,16 +9,8 @@ export interface HeaderEntry {
  * embed that clears one clears the other.
  */
 export declare const DEFAULT_IFRAME_HOSTS: readonly string[];
-/** `frame-src` sources for a host list — the one a sanitiser was given. */
-export declare const frameSources: (hosts?: readonly string[]) => string[];
 /** CSP directive names this builder writes, in the order it writes them. */
 export type CspDirective = 'default-src' | 'base-uri' | 'object-src' | 'frame-ancestors' | 'form-action' | 'script-src' | 'style-src' | 'font-src' | 'img-src' | 'media-src' | 'connect-src' | 'frame-src' | 'worker-src' | 'manifest-src';
-/**
- * The policy all four origins shared line for line. Everything a site adds is
- * a source list it hands `contentSecurityPolicy`, which replaces the default
- * for that directive rather than appending, so a reader sees the whole list.
- */
-export declare const BASE_CSP: Readonly<Partial<Record<CspDirective, readonly string[]>>>;
 /**
  * The policy string: `BASE_CSP` with each directive in `directives` replacing
  * its default. An empty list drops the directive.