wiki-formant 0.63.0 → 0.64.0

package/README.md

@@ -821,7 +821,7 @@ The dispatch stays a `switch` over the wiki's own union, so a new type is a comp
 
 An editor that draws each block in place, with a list of its own (miow's), hosts the same fields in `<BlockFieldsKit kit={KIT}>`, without `<BlockEditor>`. Only the two container fields need the full editor, since they hold a block list.
 
-A `testimonial` is `{ quote, author, role?, avatarUrl? }`, drawn by `TestimonialView` as `figure.testimonial`: the words in a `blockquote`, then a `figcaption` holding the photo and a `span` of `strong` (who) and `small` (their role). radix-wiki and miow each had one under its own field names; a site with sized images passes `picture`, which turns the photo's URL into its `<img>` attributes.
+A `testimonial` is `{ quote, author, role?, avatarUrl? }`, drawn by `TestimonialView` as `figure.testimonial`: the words in a `blockquote`, then a `figcaption` holding the photo and a `span` of `strong` (who) and `small` (their role). radix-wiki and miow each had one under its own field names; a site with sized images passes `photo`, the `<img>` attributes (`src`, `srcSet`, `sizes`) it made from `avatarUrl`. They are data, because a server component renders the view.
 
 A banner with no text of its own shows `BANNER_MESSAGES` from `wiki-formant/text`, a sentence per variant that names no wiki; `BannerView` takes it unless `message` overrides it.
 

package/dist/block-views.d.ts

@@ -109,11 +109,14 @@ export interface TestimonialViewProps {
     author: string;
     role?: string;
     avatarUrl?: string;
-    /** The photo's `<img>` attributes; a site with an image pipeline passes its sized `srcSet`. Default the bare URL. */
-    picture?: (src: string) => ImgHTMLAttributes<HTMLImageElement>;
+    /**
+     * The photo's sized `<img>` attributes, for a site with an image pipeline.
+     * Data, not a function: a server component renders this client view.
+     */
+    photo?: Pick<ImgHTMLAttributes<HTMLImageElement>, 'src' | 'srcSet' | 'sizes'>;
 }
 /** Someone's words over who said them, with their photo when there is one. */
-export declare function TestimonialView({ quote, author, role, avatarUrl, picture }: TestimonialViewProps): import("react").JSX.Element | null;
+export declare function TestimonialView({ quote, author, role, avatarUrl, photo }: TestimonialViewProps): import("react").JSX.Element | null;
 /**
  * A maintenance notice.
  *

package/dist/block-views.js

@@ -115,11 +115,11 @@ export function StatsView({ items, columns = 4, }) {
     return (_jsx("div", { className: cx('stat-grid', `stat-grid-${columns}`), children: rows.map((item, i) => (_jsxs("div", { className: "stat-card", children: [_jsxs("span", { className: "stat-value", children: [item.value, item.suffix && _jsx("span", { className: "stat-suffix", children: item.suffix })] }), _jsx("span", { className: "stat-label", children: item.label })] }, item.id ?? i))) }));
 }
 /** Someone's words over who said them, with their photo when there is one. */
-export function TestimonialView({ quote, author, role, avatarUrl, picture = src => ({ src }) }) {
+export function TestimonialView({ quote, author, role, avatarUrl, photo }) {
     if (!quote.trim())
         return null;
-    const photo = avatarUrl && safeLinkHref(avatarUrl);
-    return (_jsxs("figure", { className: "testimonial", children: [_jsx("blockquote", { children: quote }), _jsxs("figcaption", { children: [photo && _jsx("img", { ...picture(photo), alt: "", loading: "lazy" }), _jsxs("span", { children: [_jsx("strong", { children: author }), role && _jsx("small", { children: role })] })] })] }));
+    const src = avatarUrl && safeLinkHref(avatarUrl);
+    return (_jsxs("figure", { className: "testimonial", children: [_jsx("blockquote", { children: quote }), _jsxs("figcaption", { children: [src && _jsx("img", { src: src, ...photo, alt: "", loading: "lazy" }), _jsxs("span", { children: [_jsx("strong", { children: author }), role && _jsx("small", { children: role })] })] })] }));
 }
 // ---- banner -----------------------------------------------------------------
 /**

package/dist/blocks.js

@@ -145,12 +145,7 @@ export async function mapBlockTreeAsync(blocks, map, shape) {
  * so a code block inside an infobox shipped unhighlighted.
  */
 export function someBlock(blocks, predicate, containers) {
-    return blocks.some(block => {
-        const groups = containers(block);
-        if (!groups)
-            return predicate(block);
-        return groups.some(group => someBlock(group, predicate, containers));
-    });
+    return leafBlocks(blocks, containers).some(predicate);
 }
 // ---- the shared leaf renderers ----------------------------------------------
 /**

package/dist/category.d.ts

@@ -58,7 +58,3 @@ export declare function categoryView<P extends FacetablePage & {
     sortHref: (to: "title" | "recent") => string;
     sections: CategorySection[];
 }>;
-export type CategoryView<P> = Awaited<ReturnType<typeof categoryView<P & FacetablePage & {
-    tagPath: string;
-    slug: string;
-}>>>;

package/dist/combobox.js

@@ -10,9 +10,7 @@
 // the attribute that announces the highlighted row as the reader arrows
 // through it. A combobox without it is a text field that silently changes what
 // Enter does.
-/** The id of one option row. Exported because a caller that scrolls the
- *  highlighted row into view has to find it by the same id the input points at. */
-/** @internal */
+/** The id of one option row, which `aria-activedescendant` names. @internal */
 export function optionId(baseId, listKey, index) {
     return `${listId(baseId, listKey)}-opt-${index}`;
 }

package/dist/conformance.d.ts

@@ -139,6 +139,8 @@ export declare function agentCardParity(t: Tester): Promise<void>;
  * will pass is a check that measures nothing.
  */
 export declare function conditionalGetChecks(t: Tester, paths: readonly string[]): Promise<void>;
+/** The JSON descriptors every S10 origin serves: the two agent-card paths, the OpenAPI pair, the MCP manifest and the server card. */
+export declare const S10_DESCRIPTORS: readonly string[];
 /**
  * A JSON descriptor is revalidatable — an agent card, an OpenAPI document, a
  * registry manifest, a server card.
@@ -149,8 +151,6 @@ export declare function conditionalGetChecks(t: Tester, paths: readonly string[]
  * document moving, which is worse than none. The body-derived ETag is the whole
  * validator, and it is enough.
  */
-/** The JSON descriptors every S10 origin serves: the two agent-card paths, the OpenAPI pair, the MCP manifest and the server card. */
-export declare const S10_DESCRIPTORS: readonly string[];
 export declare function descriptorChecks(t: Tester, paths?: readonly string[]): Promise<void>;
 /**
  * Documents that project one corpus at different depths carry different ETags.

package/dist/conformance.js

@@ -327,6 +327,15 @@ export async function conditionalGetChecks(t, paths) {
         }
     }
 }
+/** The JSON descriptors every S10 origin serves: the two agent-card paths, the OpenAPI pair, the MCP manifest and the server card. */
+export const S10_DESCRIPTORS = [
+    '.well-known/agent-card.json',
+    '.well-known/agent.json',
+    '.well-known/openapi.json',
+    'openapi.json',
+    '.well-known/mcp.json',
+    'api/mcp/server-card',
+];
 /**
  * A JSON descriptor is revalidatable — an agent card, an OpenAPI document, a
  * registry manifest, a server card.
@@ -337,15 +346,6 @@ export async function conditionalGetChecks(t, paths) {
  * document moving, which is worse than none. The body-derived ETag is the whole
  * validator, and it is enough.
  */
-/** The JSON descriptors every S10 origin serves: the two agent-card paths, the OpenAPI pair, the MCP manifest and the server card. */
-export const S10_DESCRIPTORS = [
-    '.well-known/agent-card.json',
-    '.well-known/agent.json',
-    '.well-known/openapi.json',
-    'openapi.json',
-    '.well-known/mcp.json',
-    'api/mcp/server-card',
-];
 export async function descriptorChecks(t, paths = S10_DESCRIPTORS) {
     for (const path of paths) {
         const url = path.startsWith('http') ? path : `${t.base}/${path.replace(/^\//, '')}`;

package/dist/crawlers.js

@@ -53,10 +53,6 @@ export function detectAiBot(userAgent) {
     }
     return null;
 }
-/** Every token that needs its own robots.txt group — which is all of them. @internal */
-export function aiCrawlerTokens() {
-    return AI_CRAWLERS.map(c => c.token);
-}
 /**
  * The agent surface an S10 origin serves, allowed in every group. All three
  * `robots.ts` files listed these by hand, and a path missing from one list is
@@ -110,7 +106,7 @@ export function crawlerRules(opts) {
         // honestly as itself was told the endpoint was off limits. The roster is
         // for indexing policy, not for hiding a documented endpoint.
         { userAgent: '*', allow: [...new Set([...[opts.allow].flat(), ...aiAllow])], disallow },
-        ...aiCrawlerTokens().map(userAgent => ({ userAgent, allow: aiAllow, disallow })),
+        ...AI_CRAWLERS.map(({ token: userAgent }) => ({ userAgent, allow: aiAllow, disallow })),
         ...SEARCH_ENGINES.map(userAgent => ({ userAgent, allow: '/', disallow: searchDisallow })),
     ];
 }

package/dist/headings.js

@@ -79,14 +79,7 @@ export function injectHeadingIds(html, options = {}) {
  * consumers use only the injector above.
  */
 export function headingsFrom(html) {
-    const out = [];
-    for (const [, tag, attrs, content] of html.matchAll(HEADING)) {
-        const id = getAttr(attrs ?? '', 'id');
-        const text = stripTags(content ?? '');
-        if (id && text)
-            out.push({ id, text, level: Number(tag[1]) });
-    }
-    return out;
+    return headingOutline(html).filter(h => h.id);
 }
 /**
  * Every heading in `html`, in document order, whether or not it carries an id —

package/dist/maintenance.d.ts

@@ -3,7 +3,7 @@ export type SourceListItem = string | {
     name?: string;
     url?: string;
 };
-export interface SourceEntry {
+interface SourceEntry {
     lastChecked?: string | null;
     note?: string;
     list?: SourceListItem[];
@@ -13,11 +13,11 @@ export type BacklogEntry = string | {
     item: string;
     status?: string;
 };
-export type FeedbackEntry = string | {
+type FeedbackEntry = string | {
     date?: string;
     note: string;
 };
-export interface RunEntry {
+interface RunEntry {
     date?: string;
     category?: string;
     summary?: string;
@@ -55,3 +55,4 @@ export declare function render(state: LogState, routine: string, newId?: () => s
     type: "content";
     text: string;
 }[];
+export {};

package/dist/maps.js

@@ -54,7 +54,13 @@ export function toMapEmbedUrl(url) {
     if (/google\.[a-z.]+\/maps/.test(url)) {
         const place = url.match(/\/place\/([^/@]+)/);
         if (place) {
-            const q = encodeURIComponent(decodeURIComponent(place[1]).replace(/\+/g, ' '));
+            // A stray `%` makes decodeURIComponent throw; the segment is then used as pasted.
+            let name = place[1];
+            try {
+                name = decodeURIComponent(name);
+            }
+            catch { }
+            const q = encodeURIComponent(name.replace(/\+/g, ' '));
             return `https://maps.google.com/maps?q=${q}&output=embed`;
         }
     }

package/dist/markdown.d.ts

@@ -1,3 +1,8 @@
+/**
+ * One pass, so a decoded `&` never starts a second entity (`<` is the
+ * text `<`), and a numeric reference past U+10FFFF stays as written rather
+ * than throwing out of the twin's route.
+ */
 export declare function decodeEntities(s: string): string;
 /** Inline-level HTML → markdown. Applied inside cells, list items, headings. */
 export declare function inlineToMarkdown(html: string): string;

package/dist/markdown.js

@@ -37,11 +37,18 @@ const NAMED_ENTITIES = {
     mu: 'μ', nu: 'ν', pi: 'π', rho: 'ρ', sigma: 'σ', tau: 'τ', phi: 'φ', omega: 'ω',
     Delta: 'Δ', Sigma: 'Σ', Omega: 'Ω', Lambda: 'Λ', Phi: 'Φ', Pi: 'Π',
 };
+/**
+ * One pass, so a decoded `&` never starts a second entity (`<` is the
+ * text `<`), and a numeric reference past U+10FFFF stays as written rather
+ * than throwing out of the twin's route.
+ */
 export function decodeEntities(s) {
-    return s
-        .replace(/&#x([0-9a-fA-F]{1,6});/g, (_m, hex) => String.fromCodePoint(parseInt(hex, 16)))
-        .replace(/&#(\d{1,7});/g, (_m, dec) => String.fromCodePoint(Number(dec)))
-        .replace(/&([a-zA-Z][a-zA-Z0-9]{1,9});/g, (m, name) => NAMED_ENTITIES[name] ?? m);
+    return s.replace(/&(?:#x([0-9a-fA-F]{1,6})|#(\d{1,7})|([a-zA-Z][a-zA-Z0-9]{1,9}));/g, (m, hex, dec, name) => {
+        if (name)
+            return NAMED_ENTITIES[name] ?? m;
+        const code = hex ? parseInt(hex, 16) : Number(dec);
+        return code <= 0x10ffff ? String.fromCodePoint(code) : m;
+    });
 }
 /** Inline-level HTML → markdown. Applied inside cells, list items, headings. */
 export function inlineToMarkdown(html) {
@@ -71,7 +78,7 @@ export function tableToMarkdown(html) {
     const pad = (r) => [...r, ...Array(width - r.length).fill('')];
     // A table whose first row is all <th> has a header; otherwise synthesise an
     // empty one, since GFM has no headerless table form.
-    const headed = /<th\b/i.test(html.slice(0, html.indexOf('</tr>') + 1));
+    const headed = /<th\b/i.test(html.slice(0, html.search(/<\/tr>/i) + 1));
     const [head, ...body] = headed
         ? [pad(rows[0]), ...rows.slice(1).map(pad)]
         : [Array(width).fill(''), ...rows.map(pad)];
@@ -83,6 +90,8 @@ export function tableToMarkdown(html) {
 }
 // The spaces either side go with it: at a block boundary they are not text.
 const BLOCK_TOKEN = /[ \t]*\u0000(\d+)\u0000[ \t]*/g;
+/** A list that holds no other list. */
+const LIST = /<(ul|ol)\b[^>]*>((?:(?!<(?:ul|ol)\b)[\s\S])*?)<\/\1>/gi;
 /** Block-level HTML → markdown. */
 export function htmlToMarkdown(html) {
     let out = html;
@@ -102,21 +111,26 @@ export function htmlToMarkdown(html) {
     ].join('\n');
     // Tables first — their inner markup must not be eaten by the generic rules.
     out = out.replace(/<table\b[^>]*>[\s\S]*?<\/table>/gi, m => block(tableToMarkdown(m)));
-    // Lists. `<ol>` numbering is computed per-list, which is why this cannot be a
-    // single regex with a `$1` backreference — inside a replace callback `$1` is
-    // a literal, not a substitution. (That exact bug shipped once and rendered
-    // every ordered list as a column of `1. $1`.)
-    out = out.replace(/<ul\b[^>]*>([\s\S]*?)<\/ul>/gi, (_m, body) => {
-        const items = [...body.matchAll(/<li\b[^>]*>([\s\S]*?)<\/li>/gi)].map(i => listItem('-', i[1]));
-        return block(items.join('\n'));
-    });
-    out = out.replace(/<ol\b[^>]*>([\s\S]*?)<\/ol>/gi, (_m, body) => {
-        const items = [...body.matchAll(/<li\b[^>]*>([\s\S]*?)<\/li>/gi)].map((i, n) => listItem(`${n + 1}.`, i[1]));
-        return block(items.join('\n'));
-    });
+    // Lists, innermost first: a list holding no other list converts, and the
+    // pass repeats until none is left, so a list nested in one of its own kind
+    // is a block before its parent reads it. A lazy match from the outer `<ul>`
+    // ended at the inner `</ul>` and ran both lists onto one line. `<ol>`
+    // numbering is computed per-list, which is why this cannot be a single regex
+    // with a `$1` backreference — inside a replace callback `$1` is a literal,
+    // not a substitution. (That exact bug shipped once and rendered every
+    // ordered list as a column of `1. $1`.)
+    for (let prev = ''; prev !== out;) {
+        prev = out;
+        out = out.replace(LIST, (_m, tag, body) => {
+            const ordered = tag.toLowerCase() === 'ol';
+            const items = [...body.matchAll(/<li\b[^>]*>([\s\S]*?)<\/li>/gi)].map((i, n) => listItem(ordered ? `${n + 1}.` : '-', i[1]));
+            return block(items.join('\n'));
+        });
+    }
     out = out
-        .replace(/<pre\b[^>]*>\s*<code\b[^>]*>([\s\S]*?)<\/code>\s*<\/pre>/gi, (_m, code) => block(`\`\`\`\n${decodeEntities(code).trim()}\n\`\`\``))
-        .replace(/<pre\b[^>]*>([\s\S]*?)<\/pre>/gi, (_m, code) => block(`\`\`\`\n${decodeEntities(code).trim()}\n\`\`\``))
+        .replace(
+    // `<code>` is optional: a stored block may be `<pre><code>` or a bare `<pre>`.
+    /<pre\b[^>]*>\s*(?:<code\b[^>]*>)?([\s\S]*?)(?:<\/code>\s*)?<\/pre>/gi, (_m, code) => block(`\`\`\`\n${decodeEntities(code).trim()}\n\`\`\``))
         .replace(/<blockquote\b[^>]*>([\s\S]*?)<\/blockquote>/gi, (_m, body) => block(inlineToMarkdown(body)
         .split('\n')
         .map(l => `> ${l}`)

package/dist/mcp.d.ts

@@ -105,6 +105,22 @@ export interface McpTool {
     };
     handler: (args: Record<string, unknown>, ctx: ToolContext) => Promise<unknown>;
 }
+/**
+ * A tool as every surface advertises it — `tools/list`, the agent card and
+ * `/.well-known/mcp.json`. The handler and the A2A skill stay behind.
+ *
+ * One projection because the two copies drifted: the manifest's had no
+ * `outputSchema`, so a descriptor said a tool answers with prose while
+ * `tools/list` said it answers with `structuredContent`.
+ */
+export declare function toolCard(tool: {
+    name: string;
+    title?: string;
+    description: string;
+    inputSchema: unknown;
+    outputSchema?: unknown;
+    annotations?: unknown;
+}): Record<string, unknown>;
 export interface McpResource {
     uri: string;
     name: string;

package/dist/mcp.js

@@ -67,6 +67,24 @@ function requestProtocol(request) {
 /** JSON-RPC batching was removed in 2025-06-18 and stays removed; it is legal only below that. */
 const allowsBatch = (v) => v === '2025-03-26' || v === '2024-11-05';
 import { clientKey, rateLimit, rateLimitHeaders, withRateLimit } from './rate-limit.js';
+/**
+ * A tool as every surface advertises it — `tools/list`, the agent card and
+ * `/.well-known/mcp.json`. The handler and the A2A skill stay behind.
+ *
+ * One projection because the two copies drifted: the manifest's had no
+ * `outputSchema`, so a descriptor said a tool answers with prose while
+ * `tools/list` said it answers with `structuredContent`.
+ */
+export function toolCard(tool) {
+    return {
+        name: tool.name,
+        ...(tool.title ? { title: tool.title } : {}),
+        description: tool.description,
+        inputSchema: tool.inputSchema,
+        ...(tool.outputSchema ? { outputSchema: tool.outputSchema } : {}),
+        ...(tool.annotations ? { annotations: tool.annotations } : {}),
+    };
+}
 /**
  * A caller-fixable failure inside a handler (page not found, empty input).
  * Reported as a tool result with `isError` so the model sees the text and can
@@ -151,6 +169,15 @@ function typeOf(v) {
         return 'null';
     return typeof v;
 }
+/** A JSON-RPC success envelope. The error twin is `rpcError` below. */
+const ok = (id, result) => ({ jsonrpc: '2.0', id, result });
+/**
+ * The -32602 a lookup miss answers with: what was asked for, then everything
+ * this server does expose, as prose one retry can act on.
+ */
+const notFound = (id, lead, kind, names, dataKey) => rpcError(id, -32602, `${lead} This server exposes: ${names.length ? quote(names) : `no ${kind}`}.`, {
+    [dataKey]: names,
+});
 const rpcError = (id, code, message, data) => ({
     jsonrpc: '2.0',
     id,
@@ -265,6 +292,13 @@ const capabilitiesOf = (config) => ({
     ...(config.prompts?.length ? { prompts: {} } : {}),
 });
 async function handleRpc(req, config, dispatch) {
+    // The body is the caller's JSON, typed or not: a `null` in a batch would
+    // throw here and take the whole response with it, CORS headers included.
+    const entry = req;
+    if (!entry || typeof entry !== 'object' || typeof entry.method !== 'string') {
+        const id = entry?.id;
+        return rpcError(typeof id === 'string' || typeof id === 'number' ? id : null, -32600, 'Invalid Request: expected a JSON-RPC object with a string "method".');
+    }
     const { id, method, params } = req;
     const p = (params ?? {});
     const resources = config.resources ?? [];
@@ -277,104 +311,60 @@ async function handleRpc(req, config, dispatch) {
     try {
         switch (method) {
             case 'initialize':
-                return {
-                    jsonrpc: '2.0',
-                    id,
-                    result: {
-                        protocolVersion: negotiateProtocol(p.protocolVersion),
-                        capabilities: capabilitiesOf(config),
-                        serverInfo: config.serverInfo,
-                        instructions: config.instructions,
-                    },
-                };
+                return ok(id, {
+                    protocolVersion: negotiateProtocol(p.protocolVersion),
+                    capabilities: capabilitiesOf(config),
+                    serverInfo: config.serverInfo,
+                    instructions: config.instructions,
+                });
             // What `initialize` tells a legacy client, asked the modern way. The
             // transport adds `resultType`, the cache hints and `_meta` serverInfo.
             case 'server/discover':
-                return {
-                    jsonrpc: '2.0',
-                    id,
-                    result: {
-                        supportedVersions: [...MCP_PROTOCOL_VERSIONS],
-                        capabilities: capabilitiesOf(config),
-                        instructions: config.instructions,
-                    },
-                };
+                return ok(id, {
+                    supportedVersions: [...MCP_PROTOCOL_VERSIONS],
+                    capabilities: capabilitiesOf(config),
+                    instructions: config.instructions,
+                });
             // Notifications have no response at all.
             case 'notifications/initialized':
             case 'notifications/cancelled':
                 return null;
             case 'ping':
-                return { jsonrpc: '2.0', id, result: {} };
+                return ok(id, {});
             case 'tools/list':
-                return {
-                    jsonrpc: '2.0',
-                    id,
-                    result: {
-                        tools: config.tools.map(({ name, title, description, inputSchema, outputSchema, annotations }) => ({
-                            name,
-                            ...(title ? { title } : {}),
-                            description,
-                            inputSchema,
-                            ...(outputSchema ? { outputSchema } : {}),
-                            ...(annotations ? { annotations } : {}),
-                        })),
-                    },
-                };
+                return ok(id, { tools: config.tools.map(toolCard) });
             case 'resources/list':
-                return {
-                    jsonrpc: '2.0',
-                    id,
-                    result: {
-                        resources: resources.map(({ uri, name, description, mimeType }) => ({
-                            uri,
-                            name,
-                            description,
-                            mimeType,
-                        })),
-                    },
-                };
+                return ok(id, {
+                    resources: resources.map(({ uri, name, description, mimeType }) => ({ uri, name, description, mimeType })),
+                });
             // Declared `resources` makes a client ask for templates too. There are
             // none to give — every resource here is a fixed URI — but an empty list
             // is the answer to that question, where -32601 reads as a broken server.
             case 'resources/templates/list':
-                return { jsonrpc: '2.0', id, result: { resourceTemplates: [] } };
+                return ok(id, { resourceTemplates: [] });
             case 'resources/read': {
                 const { uri } = p;
                 const resource = uri ? resources.find(r => r.uri === uri) : undefined;
                 const content = resource ? await resource.read() : null;
                 if (content == null) {
-                    const uris = resources.map(r => r.uri);
                     const lead = uri ? `Unknown resource "${uri}".` : 'Missing "uri" in params.';
-                    return rpcError(id, -32602, `${lead} This server exposes: ${uris.length ? quote(uris) : 'no resources'}.`, { availableResources: uris });
+                    return notFound(id, lead, 'resources', resources.map(r => r.uri), 'availableResources');
                 }
-                return {
-                    jsonrpc: '2.0',
-                    id,
-                    result: { contents: [{ uri, mimeType: resource.mimeType, text: content }] },
-                };
+                return ok(id, { contents: [{ uri, mimeType: resource.mimeType, text: content }] });
             }
             case 'prompts/list':
-                return {
-                    jsonrpc: '2.0',
-                    id,
-                    result: { prompts: prompts.map(({ name, description }) => ({ name, description })) },
-                };
+                return ok(id, { prompts: prompts.map(({ name, description }) => ({ name, description })) });
             case 'prompts/get': {
                 const { name } = p;
                 const prompt = name ? prompts.find(x => x.name === name) : undefined;
                 if (!prompt) {
-                    const names = prompts.map(x => x.name);
                     const lead = name ? `Unknown prompt "${name}".` : 'Missing "name" in params.';
-                    return rpcError(id, -32602, `${lead} This server exposes: ${names.length ? quote(names) : 'no prompts'}.`, { availablePrompts: names });
+                    return notFound(id, lead, 'prompts', prompts.map(x => x.name), 'availablePrompts');
                 }
-                return {
-                    jsonrpc: '2.0',
-                    id,
-                    result: {
-                        description: prompt.description,
-                        messages: [{ role: 'user', content: { type: 'text', text: prompt.text } }],
-                    },
-                };
+                return ok(id, {
+                    description: prompt.description,
+                    messages: [{ role: 'user', content: { type: 'text', text: prompt.text } }],
+                });
             }
             case 'tools/call': {
                 const { name, arguments: rawArgs = {} } = p;

package/dist/pagination.d.ts

@@ -42,20 +42,3 @@ export declare function listEnvelope<T>(pages: T[], total: number, page: number,
     note?: string;
     pages: T[];
 };
-/**
- * The entries either side of the current one in an already-ordered list.
- *
- * The ordering is the caller's, deliberately — it is the one thing here that is
- * never portable. A wiki's sequence is its section's configured sort, a
- * knowledge base's is a taxonomy walk, and a company log's is `updatedAt` desc.
- *
- * `null` on both sides when the page is not in the list, so a page reached by a
- * URL its own section does not list renders no nav rather than a wrong one.
- *
- * No query. Callers already hold the ordered siblings for something else, a
- * related-pages panel or a section listing, so the neighbours cost no lookups.
- */
-export declare function adjacentPages<T>(ordered: readonly T[], isCurrent: (page: T) => boolean): {
-    prev: T | null;
-    next: T | null;
-};

package/dist/pagination.js

@@ -52,22 +52,3 @@ export function listEnvelope(pages, total, page, pageSize, emptyNote) {
         pages,
     };
 }
-/**
- * The entries either side of the current one in an already-ordered list.
- *
- * The ordering is the caller's, deliberately — it is the one thing here that is
- * never portable. A wiki's sequence is its section's configured sort, a
- * knowledge base's is a taxonomy walk, and a company log's is `updatedAt` desc.
- *
- * `null` on both sides when the page is not in the list, so a page reached by a
- * URL its own section does not list renders no nav rather than a wrong one.
- *
- * No query. Callers already hold the ordered siblings for something else, a
- * related-pages panel or a section listing, so the neighbours cost no lookups.
- */
-export function adjacentPages(ordered, isCurrent) {
-    const i = ordered.findIndex(isCurrent);
-    if (i < 0)
-        return { prev: null, next: null };
-    return { prev: ordered[i - 1] ?? null, next: ordered[i + 1] ?? null };
-}

package/dist/react-server.d.ts

@@ -195,40 +195,6 @@ export declare function Breadcrumbs({ items, base, className, link: Link, lastAs
 export declare function BreadcrumbsRow({ actions, className, ...props }: BreadcrumbsProps & {
     actions?: ReactNode;
 }): import("react").JSX.Element;
-/** One end of the foot nav: where it goes and what it is called. */
-export interface PageNavRef {
-    title: string;
-    href: string;
-}
-export interface PageNavProps {
-    prev?: PageNavRef | null;
-    next?: PageNavRef | null;
-    link?: WikiLinkComponent;
-    /** The landmark's accessible name. */
-    label?: string;
-    prevLabel?: string;
-    nextLabel?: string;
-    /**
-     * The arrows. `ReactNode` rather than a string because both wikis draw them
-     * with an icon component, and this package is not acquiring an icon peer to
-     * hold two glyphs.
-     */
-    prevGlyph?: ReactNode;
-    nextGlyph?: ReactNode;
-}
-/**
- * The sequential read at the foot of an article — the move the infobox rail's
- * lateral links do not cover.
- *
- * Ordering is entirely the caller's; pair this with `adjacentPages` from
- * `wiki-formant/pagination` over a list you already hold.
- *
- * The `page-nav__*` class names are NOT props: they are the convention every
- * stylesheet implements, and making them configurable is how a convention
- * forks. The empty `<div>` holds the first article's left column so the next
- * link stays in the right one.
- */
-export declare function PageNav({ prev, next, link: Link, label, prevLabel, nextLabel, prevGlyph, nextGlyph, }: PageNavProps): import("react").JSX.Element | null;
 export interface InfoboxAsideProps {
     /** The landmark's accessible name, e.g. `Key facts about ${title}`. */
     label: string;

package/dist/react-server.js

@@ -148,23 +148,6 @@ export function Breadcrumbs({ items, base, className = '', link: Link = Anchor,
 export function BreadcrumbsRow({ actions, className = '', ...props }) {
     return (_jsxs("div", { className: `breadcrumbs-row ${actions ? 'spread' : ''} ${className}`.trim(), children: [_jsx(Breadcrumbs, { ...props }), actions] }));
 }
-/**
- * The sequential read at the foot of an article — the move the infobox rail's
- * lateral links do not cover.
- *
- * Ordering is entirely the caller's; pair this with `adjacentPages` from
- * `wiki-formant/pagination` over a list you already hold.
- *
- * The `page-nav__*` class names are NOT props: they are the convention every
- * stylesheet implements, and making them configurable is how a convention
- * forks. The empty `<div>` holds the first article's left column so the next
- * link stays in the right one.
- */
-export function PageNav({ prev, next, link: Link = Anchor, label = 'Article navigation', prevLabel = 'Previous', nextLabel = 'Next', prevGlyph = '\u2190', nextGlyph = '\u2192', }) {
-    if (!prev && !next)
-        return null;
-    return (_jsxs("nav", { className: "page-nav", "aria-label": label, children: [prev ? (_jsxs(Link, { href: prev.href, className: "page-nav-link", rel: "prev", children: [_jsxs("span", { className: "page-nav-label", children: [prevGlyph, prevLabel] }), _jsx("span", { className: "page-nav-title", children: prev.title })] })) : (_jsx("div", {})), next && (_jsxs(Link, { href: next.href, className: "page-nav-link page-nav-link--end", rel: "next", children: [_jsxs("span", { className: "page-nav-label page-nav-label--end", children: [nextLabel, nextGlyph] }), _jsx("span", { className: "page-nav-title", children: next.title })] }))] }));
-}
 /**
  * The facts panel beside an article. Named, because two of the three asides
  * this replaced had no accessible name, and a complementary landmark without

package/dist/stats-figures.d.ts

@@ -1,5 +1,6 @@
 import { type ReactNode } from 'react';
 import type { Digest } from './analytics.js';
+export declare const count: (n: number) => string;
 /**
  * The figures as `.stats-figures button[aria-pressed]`, each with its change
  * as `.stats-delta[data-better]` for a stylesheet to colour, and the pressed one per

package/dist/stats-figures.js

@@ -8,7 +8,7 @@ import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-run
 import { startAuthentication, startRegistration } from '@simplewebauthn/browser';
 import { useMemo, useState } from 'react';
 import { TimeChart, stepDecimals } from './chart.js';
-const count = (n) => n.toLocaleString('en');
+export const count = (n) => n.toLocaleString('en');
 // Whole seconds and percentages, unless an axis tick's step needs more to tell it from the next.
 const places = (step) => (step ? stepDecimals(step) : 0);
 const duration = (s, step) => (s < 60 ? `${s.toFixed(places(step))}s` : `${Math.floor(s / 60)}m ${Math.round(s % 60)}s`);

package/dist/stats.js

@@ -1,6 +1,6 @@
 import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
 import { STATS_FILTERS } from './analytics.js';
-import { PasskeyButton, PasskeySignOut, StatsFigures } from './stats-figures.js';
+import { PasskeyButton, PasskeySignOut, StatsFigures, count } from './stats-figures.js';
 /** The windows the stats page offers, in days; `Infinity` is all time. */
 const STATS_RANGES = [1, 7, 30, 90, 365, Infinity];
 /** A window as its `?days=` value. */
@@ -31,7 +31,6 @@ const href = (days, filter) => {
             q.set(k, filter[k]);
     return `?${q}`;
 };
-const count = (n) => n.toLocaleString('en');
 const regions = new Intl.DisplayNames(['en'], { type: 'region' });
 const country = (code) => {
     try {

package/dist/taxonomy.js

@@ -37,7 +37,11 @@ export function hrefBuilder(prefix = '') {
 /** Categories mounted at the root. */
 export const defaultHref = hrefBuilder();
 const DEFAULT_ALPHA_INDEX_MIN_PAGES = 40;
-const metaValue = (page, key) => (page.metadata?.[key] ?? '').trim();
+/** A key's value as text. Metadata is untyped JSON, and a number or a list stored under a key must not throw. */
+const metaValue = (page, key) => {
+    const value = page.metadata?.[key];
+    return typeof value === 'string' ? value.trim() : typeof value === 'number' ? String(value) : '';
+};
 /** Bucket for titles that don't start with a letter (numerals, `$CAPER`). @internal */
 export function firstLetter(title) {
     const ch = title.trim()[0]?.toUpperCase() ?? '';

package/dist/tiptap.d.ts

@@ -1,6 +1,5 @@
 import { type ReactNode } from 'react';
 import { Extension, Node as TiptapNode } from '@tiptap/core';
-/** Local `cn`. Both wikis import one; the package will not depend on one. */
 /**
  * An embed's address, if it is https on a host the sanitiser and the CSP
  * admit; otherwise null, and the node draws an empty frame. The editor draws

package/dist/tiptap.js

@@ -23,7 +23,6 @@ import { useClickOutside } from './react.js';
 import { cx } from './html.js';
 import { slugifyHeading, uniqueHeadingId } from './headings.js';
 import { CODE_LANGS, DEFAULT_LANG } from './blocks.js';
-/** Local `cn`. Both wikis import one; the package will not depend on one. */
 // ---- iframe -----------------------------------------------------------------
 /**
  * An embed's address, if it is https on a host the sanitiser and the CSP

package/dist/validation.js

@@ -56,7 +56,7 @@ export function validateLinkGroups(groups) {
             Array.isArray(g.links) &&
             g.links.every(l => isRecord(l) && typeof l.label === 'string' && okUrl(l.href))));
 }
-/** `[{ label, language?, code }]` — a code-tabs block's tabs. `code` renders as HTML. @internal */
+/** `[{ label, language?, code }]` — a code-tabs block's tabs. `code` is source text, escaped when it renders. @internal */
 export function validateCodeTabs(tabs) {
     return (Array.isArray(tabs) &&
         tabs.every(t => isRecord(t) &&

package/dist/versioning.d.ts

@@ -10,4 +10,3 @@ export declare function formatVersion(version: SemVer): string;
 export declare function incrementVersion(version: SemVer, changeType: ChangeType): SemVer;
 /** Bump a version string in one step — the call site almost always wants this. */
 export declare function bump(version: string | null | undefined, changeType: ChangeType): string;
-export declare function compareVersions(a: string, b: string): number;

package/dist/versioning.js

@@ -33,8 +33,3 @@ export function incrementVersion(version, changeType) {
 export function bump(version, changeType) {
     return formatVersion(incrementVersion(parseVersion(version), changeType));
 }
-export function compareVersions(a, b) {
-    const x = parseVersion(a);
-    const y = parseVersion(b);
-    return x.major - y.major || x.minor - y.minor || x.patch - y.patch;
-}

package/dist/well-known.d.ts

@@ -110,6 +110,7 @@ export interface ManifestTool {
     title?: string;
     description: string;
     inputSchema: unknown;
+    outputSchema?: unknown;
     annotations?: unknown;
 }
 export interface McpManifestConfig {

package/dist/well-known.js

@@ -9,7 +9,7 @@
 // Nothing here touches a framework: these return plain values, and the caller
 // wraps them in whatever its router wants. That keeps this package free of a
 // Next dependency and keeps each app's route a two-liner.
-import { MCP_PROTOCOL_VERSION, MCP_PROTOCOL_VERSIONS } from './mcp.js';
+import { MCP_PROTOCOL_VERSION, MCP_PROTOCOL_VERSIONS, toolCard } from './mcp.js';
 import { MCP_RATE_LIMIT_TEXT } from './rate-limit.js';
 import { descriptorResponse } from './http.js';
 /**
@@ -195,13 +195,7 @@ export function mcpManifest(config) {
             rateLimit: MCP_RATE_LIMIT_TEXT,
         },
         ...extra,
-        tools: tools.map(({ name, title, description, inputSchema, annotations }) => ({
-            name,
-            ...(title ? { title } : {}),
-            description,
-            inputSchema,
-            ...(annotations ? { annotations } : {}),
-        })),
+        tools: tools.map(toolCard),
     };
 }
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wiki-formant",
-  "version": "0.63.0",
+  "version": "0.64.0",
   "description": "The portable half of a wiki: derived taxonomy and facet controls, a version-negotiating MCP transport, markdown twins, block rendering, a rich-text editor engine, conditional-GET plumbing, and the headers and CSP every origin sends.",
   "type": "module",
   "license": "MIT",