wiki-formant 0.86.1 → 0.86.2

package/README.md

@@ -321,13 +321,6 @@ export async function GET(request: Request) {
 
 `descriptorResponse` and `descriptorHandler` serve a JSON descriptor (an agent card, a manifest, an OpenAPI document) with its own ETag and `Access-Control-Allow-Origin: *`, since every descriptor is public and browser agents read them; six of nine routes had passed the header by hand.
 
-`wellKnownHandler({ agentCard, mcpManifest, openapi, registryAuth? })` is the whole `/.well-known/[doc]` route: the card at `agent.json` and `agent-card.json`, the manifest at `mcp.json`, the spec at `openapi.json` and the registry's proof at `mcp-registry-auth`, each through `descriptorResponse`, and a 404 for any other name. A rewrite puts `/openapi.json` on it. `registryAuth: null` serves no proof, for a tenant of a host whose namespace is the host's.
-
-```ts
-// src/app/.well-known/[doc]/route.ts
-export const GET = wellKnownHandler({ agentCard: AGENT_CARD, mcpManifest: MCP_MANIFEST, openapi: SPEC });
-```
-
 `corpusValidatorsFrom(seed, stamps)` is that pair from an aggregate: the newest of `stamps` (the epoch when every one is null), appended to `seed` for the tag. `corpusRoute(validators, build)` is the whole handler, and skips the build on a 304.
 
 ```ts
@@ -376,7 +369,7 @@ Four configs had restated these by hand on the grounds that a config could not i
 export default withWikiDefaults<NextConfig>({ async redirects() { /* … */ } }, { csp });
 ```
 
-`contentSecurityPolicy` starts from the policy all four origins shared line for line, and each directive passed replaces its default rather than appending, so the call site reads as the whole list. An empty list drops a directive. A second argument, `{ nonce, inlineScripts }`, makes `script-src` strict where there is a nonce: `'self'`, the nonce and `scriptHash` of each inline script, with no `'unsafe-inline'`. The hash admits a static boot script without the layout reading the nonce, and moves with the script when a bump changes it.
+`contentSecurityPolicy` starts from the policy all four origins shared line for line, and each directive passed replaces its default rather than appending, so the call site reads as the whole list. An empty list drops a directive.
 
 The default `frame-src` is `DEFAULT_IFRAME_HOSTS`, the same list the sanitiser's `iframeHosts` defaults to. The sanitiser's comment had asked every config to keep the two matched by hand, and one did not: its policy lacked the bare `youtube.com` and `youtube-nocookie.com` its sanitiser kept, so those embeds survived cleaning and then rendered blank. A site with its own host list passes it to the sanitiser and states the same hosts in its `frame-src`.
 
@@ -756,21 +749,19 @@ const core = coreAtomicValidator({ pageId: id => /^\d{1,9}$/.test(id) });
 
 `coreAtomicToMarkdown` joins a resolved page's site-relative `href` to `siteUrl`, because a twin is read off-site; a wiki whose lists hold its own page rows keeps those two cases. `coreAtomicValidator` caps `recentPages.limit` and `pageIds` at `MAX_BLOCK_ROWS`, a whole number of rows, because both end in a database `take:`; `blockLimit` is the same bound on the read side.
 
-`createBlockValidator` returns `blockIssues` beside the boolean validators: the same walk, reporting where each failure is.
+`defineBlocks` (in `wiki-formant/validation`) is the whole model in one declaration: the shape, the types, `createBlock`, `duplicateBlock`, `validateBlocks` and `blockIssues`, from a record of defaults and the wiki's own leaf checks. A check for a core type narrows the package's: `list: (b, core) => core(b) && isSection(b.under)`. `BlockTree<Atomic>` is the union over the two containers.
 
 ```ts
-const issues = blockIssues(body.content);
-if (issues.length) return badRequest(`Invalid content: ${describeBlockIssues(issues)}`);
-// Invalid content: [2].columns[0].blocks[1]: malformed linkGrid block
+const model = defineBlocks<Block>({ defaults: { ...coreBlockDefaults(), corpusStats: () => ({ type: 'corpusStats', view: 'sourceTiers' }) }, checks: { corpusStats: b => isCorpusView(b.view) } });
+export const { shape: BLOCK_SHAPE, createBlock, duplicateBlock, validateBlocks, blockIssues } = model;
 ```
 
-`defineBlocks<Block>({ defaults, checks?, pageId? })` is a wiki's whole block model from its type set. `defaults` is what inserting each type makes, and its keys are the types the wiki knows; `checks` is the leaf check for each native type, and for a core type the wiki narrows, which gets the core check as its second argument. It returns `types`, `atomicTypes` (all but the two containers), `shape`, `createBlock`, `duplicateBlock`, `validateBlocks` and `blockIssues`. `BlockTree<AtomicBlock>` from `wiki-formant/blocks` is the union it models.
+`createBlockValidator` returns `blockIssues` beside the boolean validators: the same walk, reporting where each failure is.
 
 ```ts
-export const { shape: BLOCK_SHAPE, createBlock, duplicateBlock, validateBlocks, blockIssues } = defineBlocks<Block>({
-  defaults: { ...coreBlockDefaults({ stats }), corpusStats: () => ({ type: 'corpusStats', view: 'sourceTiers' }) },
-  checks: { corpusStats: b => isCorpusView(b.view), list: (b, core) => core(b) && isSection(b.under) },
-});
+const issues = blockIssues(body.content);
+if (issues.length) return badRequest(`Invalid content: ${describeBlockIssues(issues)}`);
+// Invalid content: [2].columns[0].blocks[1]: malformed linkGrid block
 ```
 
 A `codeTabs` tab's `code` is source text in every wiki here, and every view treats it that way: `CodeTabsView` escapes it into a `<pre><code>`, the sanitiser leaves it alone, the markdown twin fences it verbatim. A wiki that escapes and highlights on the server passes `highlighted` to the view. The package used to assume editors stored highlighted markup; none ever had, and every twin printed `Vec<u8>` as `Vec`.
@@ -976,8 +967,10 @@ its readers asked for. The queries that return zero rows are the valuable ones
 `wiki-formant/passkey` is the door to a site's own admin pages: a passkey and
 nothing else, no account, password or email. `createPasskeyGate({ sql, rpName })`
 returns the whole of it. `gate.route` is the sign-in route, `gate.signOut` the
-sign-out route, `gate.signedIn(cookieValue)` is the check a page makes, `gate.allows(request)` the same check over a write route's request, and
-`gate.cookie` is the cookie's name. The two tables (`Passkey`, `PasskeyToken`) ship as Prisma
+sign-out route, `gate.signedIn(cookieValue)` is the check a page makes,
+`gate.allows(request)` the same check for a write route's own request, and
+`gate.cookie` is the cookie's name. An editor with one writer needs no
+other door: acuiq2's wiki editor opens on the passkey that opens its stats. The two tables (`Passkey`, `PasskeyToken`) ship as Prisma
 models in `prisma/passkey.prisma`, and every token is kept only as its hash.
 
 There is no sign-up. Every passkey, the first among them, is saved from a
@@ -1108,26 +1101,15 @@ the site's stylesheet gives them and the box a look.
 
 ## Base stylesheet
 
-`wiki-formant/base.css` is first the layout the package's markup does not work without: columns that stack until there is room, stored tab panels that show one at a time, a copy button pinned to its block's corner and visible on focus and on touch, a table's scroll box, the stats block's grid, the code-tab strip, the banner's row and the infobox's wrapping, the breadcrumb row, the `aria-sort` arrow as a mask over `currentColor`, the stats page's grid and bars, and the chart's height and pinned buttons. It also carries the shape and motion of the primitives every site re-implemented and forked — `.spinner` (a `currentColor` ring sized by `--spinner-size`), `.skeleton`'s pulse, `.empty-state`, the wrap rule for long tokens in inline `code` — and the reduced-motion guard none of them had. That part has no colour and no scale, so a design system's own rules override it at equal specificity. The one set of tokens it declares is the page frame every site lays out by: `--content-width` (72rem, gutters inside), `--sidebar-width` (18rem) and `--page-pad` (16 / 24 / 32px at base / 640 / 1024). They sit in the components layer, so a site never restates them in `@theme`, which would lose; an element that must differ sets its own.
+`wiki-formant/base.css` is the layout the package's markup does not work without, and nothing else: columns that stack until there is room, stored tab panels that show one at a time, a copy button pinned to its block's corner and visible on focus and on touch, a table's scroll box, the stats block's grid, the code-tab strip, the banner's row and the infobox's wrapping, the breadcrumb row, the `aria-sort` arrow as a mask over `currentColor`, the stats page's grid and bars, and the chart's height and pinned buttons. It also carries the shape and motion of the primitives every site re-implemented and forked — `.spinner` (a `currentColor` ring sized by `--spinner-size`), `.skeleton`'s pulse, `.empty-state`, the wrap rule for long tokens in inline `code` — and the reduced-motion guard none of them had. No colour and no scale, so a design system's own rules override it at equal specificity. The one set of tokens it declares is the page frame every site lays out by: `--content-width` (72rem, gutters inside), `--sidebar-width` (18rem) and `--page-pad` (16 / 24 / 32px at base / 640 / 1024). They sit in the components layer, so a site never restates them in `@theme`, which would lose; an element that must differ sets its own.
 
 ```css
 @import "wiki-formant/base.css" layer(components);
 ```
 
-No view emits a Tailwind utility any more — `ColumnsView` states its gap and alignment as data attributes, and an inactive code tab is `hidden` — so a site no longer needs its Tailwind to scan this package for the markup to work.
-
-After the structure comes the look: every component the package's markup names (heading anchors, code tabs and the copy button, notices, references, the infobox, stats cards and deltas, link grids, see-also cards, section cards, the link preview, the rail's table of contents, the work queues, revision diffs, sortable headers, charts) drawn from twelve tokens a site maps once, unlayered, from its own palette. Four sites had each drawn the same components in their own tokens. A site's own rule after the import still wins.
+Since 0.86 it also draws the package's components — the infobox, section and stat cards, see-also and page-ref lists, the hover card, the maintenance queues, the chart's frame and buttons, code tabs, the editorial banner, references, heading anchors, link grids, revision diffs and the rail's contents — on eleven `--ui-*` tokens (`--ui-surface`, `--ui-surface-2`, `--ui-border`, `--ui-radius`, `--ui-pad`, `--ui-small`, `--ui-muted`, `--ui-accent`, `--ui-on-accent`, `--ui-up`, `--ui-down`) that a site maps from its own palette in `:root`. Four stylesheets had restated sixty of those classes with four token vocabularies; now a site states the rule only where it differs. The split of a page beside its infobox stays the site's, as does the rail's surface.
 
-```css
-:root {
-  --ui-surface: var(--color-surface-1);   --ui-muted: var(--color-text-muted);
-  --ui-surface-2: var(--color-surface-2); --ui-accent: var(--color-accent);
-  --ui-border: var(--color-border);       --ui-on-accent: var(--color-surface-0);
-  --ui-radius: var(--radius);             --ui-up: var(--color-success);
-  --ui-pad: 1rem;                         --ui-down: var(--color-error);
-  --ui-small: var(--text-small);          --ui-shadow: var(--shadow);
-}
-```
+No view emits a Tailwind utility any more — `ColumnsView` states its gap and alignment as data attributes, and an inactive code tab is `hidden` — so a site no longer needs its Tailwind to scan this package for the markup to work.
 
 ## API
 
@@ -1170,12 +1152,6 @@ and overwrites any inbound copy — and the leftmost `x-forwarded-for` only wher
 `limitClient(prefix, headers, opts)` is the per-address gate, `rateLimit` over
 `clientKey`, which a dozen call sites had written out.
 
-`wiki-formant/scripts` is what a wiki's direct-database scripts share: `withClient(fn, { tag })` (a pg client that rolls back and fails the run on a throw, and invalidates the cache `tag` through the Vercel CLI when it wrote), `storeFor(client)` and `readPage` over the app's own store, `writeRevision(client, page, blocks, opts)` (one revision, refused if the page moved since it was read), `upsertWikiPage(client, page)` (a revision only when something changed), the block builders `uid`, `content`, `banner` and `infobox`, and `assertLinkShapes`, which throws on the mis-shaped link a script would otherwise store unseen. Its `ScriptClient` is the slice of a pg client they take; Prisma fits it with `$queryRawUnsafe`.
-
-`wiki-formant/link-check`'s `auditLinks(pages, { livePaths, probe?, internal? })` is a checker's whole walk: every link on every page probed once, internals checked against `livePaths` (a page's `/history` and `/edit` resolve with it, and a query rides on its path), metadata facts included, embeds collected for the caller to probe. `printLinkAudit(audit, { scope, pagesScanned })` prints what broke.
-
-`wiki-formant/knip` is the dead-code config every app spreads into its own `knip.ts`: `export default { ...base, ignoreBinaries: [...base.ignoreBinaries, 'ffmpeg'] }`.
-
 ## A bin
 
 `check-classes` fails a build on a `className` token that resolves to nothing, and counts the inverse fault — 3+ Tailwind utilities inline, which is a component class that was never named. Both sets are derived from the emitted stylesheets rather than listed, so nothing has to be maintained per project. Run it from a repo root after a build:
@@ -1213,6 +1189,20 @@ An app that keeps one schema file and writes the models into it by hand, because
 npx prisma-models analytics --check --in prisma/schema.prisma --tenant   # miow
 ```
 
+`wiki-formant/scripts` is what a seed or sweep script shares with the next one: `withClient` (a `pg` client on `DATABASE_URL` that rolls back on a throw and expires the wiki's cache tag after a write), `readPage` and `writeRevision` (one revision over a page the script read, refused if the page moved on), `upsertWikiPage`, the block builders `content`, `banner` and `infobox`, and `assertLinkShapes`, which refuses a link or reference the views would silently drop. radix-wiki and caper had each written it in a different language.
+
+```ts
+import { withClient, readPage, writeRevision } from 'wiki-formant/scripts';
+await withClient(async client => {
+  const page = await readPage(client, 'contents/tech', 'radix-engine');
+  await writeRevision(client, page!, blocks, { change: 'minor', message: 'Why, with the source.' });
+}, { tag: 'wiki' });
+```
+
+`wiki-formant/link-check`'s `auditLinks` is the walk every dead-link checker makes — each link once, with the pages that carry it, probed with `probeExternal` or the checker's own — and `printLinkAudit` its first lines; what a checker keeps is its live paths, its special cases and the rest of its report.
+
+`wiki-formant/knip` is the knip configuration the apps share, spread into each one's `knip.ts` with what is its own.
+
 `fts-ddl <table>` rebuilds a table's `search_tsv` generated column and its GIN index from the expression `wiki-formant/search` queries, over `DIRECT_URL` (else `DATABASE_URL` on 5432). Run it before declaring the column in `schema.prisma`; the bin's header says why. A PascalCase Prisma table goes in quoted, as SQL names it.
 
 ```sh

package/bin/_cli.mjs

@@ -38,13 +38,4 @@ export async function connect({ direct = false, ...options } = {}) {
   return client;
 }
 
-/** `vercel cache invalidate --tag`, reported either way. */
-export async function invalidate(tag) {
-  const { execFileSync } = await import('node:child_process');
-  try {
-    execFileSync('vercel', ['cache', 'invalidate', '--tag', tag, '--yes'], { stdio: 'ignore' });
-    console.log(`cache: ${tag} tag invalidated`);
-  } catch (e) {
-    console.warn(`cache: ${tag} tag NOT invalidated (${e.message}); run \`vercel cache invalidate --tag ${tag}\``);
-  }
-}
+export { invalidate } from '../dist/scripts.js';

package/dist/base.css

@@ -1,8 +1,7 @@
 /* wiki-formant/base.css — the layout the package's markup does not work without.
 
-   Structure first: the layout the markup needs, no colour and no type scale.
-   Then, at the end, the look: every component drawn from twelve `--ui-*`
-   tokens the importing stylesheet maps from its own palette. That stylesheet
+   Structure only: no colour, no type scale, no design token. Every value that
+   is a look rather than a mechanism is left to the importing stylesheet, which
    loads this first and overrides anything here with an equally specific rule.
 
      @import "wiki-formant/base.css" layer(components);
@@ -176,6 +175,157 @@ html[data-sidebar='closed'] .wiki-sidebar { width: 0; }
 .ref-backlink,
 .reference-link { text-decoration: none; }
 
+/* ---- the look of the package's components ----------------------------------
+   The panels, lists, cards and rails the package's markup produces, drawn once
+   on eight tokens a site maps from its own palette in `:root`. Four
+   stylesheets had restated sixty of these classes with four vocabularies
+   (`--corner`, `--radius`, `--radius-wing`; `--space`, `--spacing-md`,
+   `--space-3`) and four bodies. A site that must differ overrides the rule;
+   one that sets no token gets a readable default off `currentColor`.
+
+     :root {
+       --ui-surface: var(--color-surface-1);   a card's background
+       --ui-surface-2: var(--color-surface-2); a raised or hovered one
+       --ui-border: var(--color-border);
+       --ui-radius: var(--radius);
+       --ui-pad: 1rem;                          a panel's padding
+       --ui-small: var(--text-small);           the small type size
+       --ui-muted: var(--color-text-muted);
+       --ui-accent: var(--color-accent);
+       --ui-on-accent: var(--color-bg);         text on the accent
+       --ui-up: var(--color-success);           a gain, an addition
+       --ui-down: var(--color-error);           a loss, a removal, a warning
+     } */
+:root {
+  --ui-surface: color-mix(in srgb, currentColor 6%, transparent);
+  --ui-surface-2: color-mix(in srgb, currentColor 12%, transparent);
+  --ui-border: color-mix(in srgb, currentColor 20%, transparent);
+  --ui-radius: 0.5rem;
+  --ui-pad: 1rem;
+  --ui-small: 0.875rem;
+  --ui-muted: color-mix(in srgb, currentColor 70%, transparent);
+  --ui-accent: currentColor;
+  --ui-on-accent: Canvas;
+  --ui-up: currentColor;
+  --ui-down: currentColor;
+}
+
+/* A panel: the infobox, a section card, a stat card, a chart. */
+.infobox, .section-card, .chart {
+  background: var(--ui-surface);
+  border: 1px solid var(--ui-border);
+  border-radius: var(--ui-radius);
+}
+.infobox { padding: var(--ui-pad); }
+.infobox table { width: 100%; table-layout: fixed; border-collapse: collapse; }
+.infobox :is(th, td) { padding: 0.375rem 0.5rem; border: 0; border-bottom: 1px solid var(--ui-border); background: none; text-align: left; vertical-align: top; }
+/* Labels are short and values are the reading: 42% still fits "Published:". */
+.infobox th { width: 42%; font-weight: 600; color: var(--ui-muted); }
+.infobox tr:last-child :is(th, td) { border-bottom: 0; }
+.infobox-facts { margin: 0; }
+.infobox-series { align-items: center; gap: 0.125rem; padding-bottom: 0.75rem; border-bottom: 1px solid var(--ui-border); text-align: center; font-size: var(--ui-small); color: var(--ui-muted); }
+.page-with-infobox { gap: 1.5rem; }
+
+.section-card { display: flex; flex-direction: column; gap: 0.5rem; padding: var(--ui-pad); transition: border-color 150ms; }
+.section-card:hover { border-color: var(--ui-accent); }
+
+.page-refs { display: flex; flex-direction: column; margin: 0; padding: 0; list-style: none; overflow: hidden; background: var(--ui-surface); border: 1px solid var(--ui-border); border-radius: var(--ui-radius); }
+.page-refs > li + li { border-top: 1px solid var(--ui-border); }
+
+.see-also-list { display: grid; grid-template-columns: repeat(auto-fill, minmax(14rem, 1fr)); gap: 0.75rem; margin: 0; padding: 0; list-style: none; }
+.see-also-item { display: flex; flex-direction: column; gap: 0.25rem; min-width: 0; padding: 0.75rem; background: var(--ui-surface); border: 1px solid var(--ui-border); border-radius: var(--ui-radius); color: inherit; text-decoration: none; transition: border-color 150ms; }
+.see-also-item:hover { border-color: var(--ui-accent); }
+.see-also-title { font-weight: 600; }
+.see-also-detail { font-size: var(--ui-small); color: var(--ui-muted); }
+
+.link-preview-card { position: fixed; z-index: 50; width: 20rem; max-width: calc(100vw - 1rem); overflow: hidden; background: var(--ui-surface); border: 1px solid var(--ui-border); border-radius: var(--ui-radius); box-shadow: var(--ui-shadow, 0 8px 24px -4px rgb(0 0 0 / 0.25)); }
+.link-preview-body { display: flex; flex-direction: column; gap: 0.25rem; padding: 0.75rem; }
+.link-preview-title { font-weight: 600; }
+.link-preview-excerpt { display: -webkit-box; margin: 0; overflow: hidden; font-size: var(--ui-small); color: var(--ui-muted); -webkit-line-clamp: 4; -webkit-box-orient: vertical; }
+
+.maintenance-queue { display: flex; flex-direction: column; gap: 0.5rem; padding-top: 1.5rem; border-top: 1px solid var(--ui-border); }
+.maintenance-count { margin-left: 0.5rem; font-size: var(--ui-small); font-weight: 400; font-variant-numeric: tabular-nums; color: var(--ui-muted); }
+.maintenance-list { display: grid; gap: 0.375rem; margin: 0; padding: 0; list-style: none; }
+.maintenance-item { display: flex; flex-wrap: wrap; align-items: baseline; gap: 0.25rem 0.5rem; }
+.maintenance-item > a { color: var(--ui-accent); }
+.maintenance-description, .maintenance-detail { font-size: var(--ui-small); color: var(--ui-muted); }
+
+.stat-grid { gap: 0.75rem; }
+.stat-card { gap: 0.25rem; padding: 0.75rem; background: var(--ui-surface); border-radius: var(--ui-radius); }
+.stat-value { font-size: 1.5rem; font-weight: 700; line-height: 1.1; }
+.stat-label { font-size: var(--ui-small); color: var(--ui-muted); }
+.stats-delta { font-size: 0.6em; font-weight: 600; }
+.stats-delta[data-better='true'] { color: var(--ui-up); }
+.stats-delta[data-better='false'] { color: var(--ui-down); }
+
+.chart-canvas { color: var(--ui-accent); font-size: 0.6875rem; --chart-axis: var(--ui-muted); --chart-up: var(--ui-up); --chart-down: var(--ui-down); }
+.chart-status { font-size: var(--ui-small); color: var(--ui-muted); }
+.chart-controls :is(button, a) { border: 1px solid var(--ui-border); border-radius: calc(var(--ui-radius) / 2); font-size: 0.625rem; opacity: 1; transition: background-color 150ms, color 150ms; }
+.chart-controls :is(button, a):hover { background: var(--ui-surface-2); }
+.chart-controls :is(button, a):is([aria-pressed='true'], [aria-current]) { background: var(--ui-accent); border-color: var(--ui-accent); color: var(--ui-on-accent); }
+
+.code-tabs { margin-block: 1rem; border: 1px solid var(--ui-border); border-radius: var(--ui-radius); }
+.code-tabs-list { overflow-x: auto; border-bottom: 1px solid var(--ui-border); background: var(--ui-surface); }
+.code-tabs-btn { padding: 0.5rem 1rem; border: 0; border-bottom: 2px solid transparent; background: transparent; font: inherit; font-size: var(--ui-small); color: var(--ui-muted); transition: color 150ms; }
+.code-tabs-btn:hover { color: inherit; }
+.code-tabs-btn-active { border-bottom-color: var(--ui-accent); color: var(--ui-accent); }
+.code-tabs pre { margin: 0; border: 0; border-radius: 0; }
+.code-copy-btn { padding: 0.375rem; border-radius: calc(var(--ui-radius) / 2); background: var(--ui-surface-2); color: var(--ui-muted); transition: opacity 120ms ease, color 120ms ease; }
+.code-copy-btn:hover { color: inherit; }
+
+.editorial-banner { align-items: flex-start; gap: 0.75rem; margin-block: 0.75rem; padding: 0.75rem; background: var(--ui-surface); border: 1px solid var(--ui-border); border-left-width: 3px; border-radius: var(--ui-radius); font-size: var(--ui-small); }
+.editorial-banner-body { flex: 1; min-width: 0; margin: 0; }
+.editorial-banner-unsourced, .editorial-banner-outdated { border-color: color-mix(in srgb, var(--ui-down) 40%, transparent); background: color-mix(in srgb, var(--ui-down) 10%, transparent); }
+.editorial-banner-unsourced .editorial-banner-icon, .editorial-banner-outdated .editorial-banner-icon { color: var(--ui-down); }
+
+.references-block { margin-top: 1.5rem; padding-top: 1rem; border-top: 1px solid var(--ui-border); }
+.references-block h2 { margin: 0 0 0.5rem; }
+.references-list { margin: 0; padding-left: 1.5rem; list-style: decimal; font-size: var(--ui-small); color: var(--ui-muted); }
+.reference-item { margin-bottom: 0.25rem; padding-left: 0.25rem; scroll-margin-top: calc(var(--rail-top, 0px) + 1rem); }
+.reference-item a, .ref-backlink { color: var(--ui-accent); }
+.reference-item:target { background: color-mix(in srgb, var(--ui-accent) 15%, transparent); border-radius: calc(var(--ui-radius) / 2); }
+
+:is(h2, h3, h4, h5, h6):has(> .heading-anchor) { position: relative; }
+.heading-anchor { position: absolute; top: 0; left: -1.25rem; font-weight: 400; color: var(--ui-muted); opacity: 0; transition: opacity 150ms; }
+.heading-anchor::before { content: '#'; }
+.heading-anchor:hover { color: var(--ui-accent); }
+:is(h2, h3, h4, h5, h6):hover > .heading-anchor, .heading-anchor:focus-visible { opacity: 1; }
+
+.facet-summary { margin: 0; font-size: var(--ui-small); color: var(--ui-muted); }
+
+.link-grid { display: flex; flex-direction: column; gap: 1rem; margin-block: 1rem; }
+.link-grid-group-description { margin: 0 0 0.75rem; font-size: var(--ui-small); color: var(--ui-muted); }
+.link-grid-group-description p { margin: 0; }
+.link-grid-pills { display: flex; flex-wrap: wrap; gap: 0.5rem; }
+.link-grid-pills > a { padding: 0.375rem 0.75rem; background: var(--ui-surface); border: 1px solid var(--ui-border); border-radius: var(--ui-radius); font-size: var(--ui-small); color: inherit; text-decoration: none; transition: background 150ms, border-color 150ms, color 150ms; }
+.link-grid-pills > a:hover { background: var(--ui-surface-2); border-color: var(--ui-accent); color: var(--ui-accent); }
+
+.revision-change-action { font-weight: 600; }
+.revision-change[data-action='added'] .revision-change-action { color: var(--ui-up); }
+.revision-change[data-action='removed'] .revision-change-action { color: var(--ui-down); }
+.revision-change[data-action='moved'] .revision-change-action { color: var(--ui-accent); }
+.revision-diff { line-height: 1.6; color: var(--ui-muted); }
+.revision-diff del { color: var(--ui-down); }
+.revision-diff ins { padding-inline: 0.125rem; border-radius: 2px; background: color-mix(in srgb, var(--ui-up) 10%, transparent); color: var(--ui-up); text-decoration: none; }
+
+.sort-header { gap: 0.25rem; transition: color 150ms; }
+.sort-header:hover, :is([aria-sort='ascending'], [aria-sort='descending']) > .sort-header { color: inherit; }
+
+.column-view { gap: 1rem; }
+
+.link { color: var(--ui-accent); text-decoration: none; cursor: pointer; }
+.link:hover { text-decoration: underline; }
+
+/* The rail's contents: a label over a group of entries, and the article's contents with the section being read lit. */
+.wiki-sidebar { --rail-border: 1px solid var(--ui-border); }
+.wiki-sidebar__scroll { gap: 1.5rem; padding: 1rem var(--page-pad) 3rem; }
+.wiki-rail__group, .wiki-rail__toc-list { display: flex; flex-direction: column; gap: 1px; }
+.wiki-rail__label { padding: 0 0.5rem 0.25rem; font-size: 0.75rem; font-weight: 600; letter-spacing: 0.04em; text-transform: uppercase; color: var(--ui-muted); }
+.wiki-rail__toc-btn, .wiki-rail__toc-item { display: flex; align-items: center; gap: 0.25rem; width: 100%; padding: 0.25rem 0.5rem; border: 0; background: none; font: inherit; color: var(--ui-muted); text-align: left; cursor: pointer; }
+.wiki-rail__toc-item { border-inline-start: 2px solid var(--ui-border); font-size: var(--ui-small); text-decoration: none; transition: color 150ms, border-color 150ms; }
+.wiki-rail__toc-item:hover, .wiki-rail__toc-item--active { border-inline-start-color: var(--ui-accent); color: var(--ui-accent); }
+.wiki-rail__toc-item--active { font-weight: 600; }
+
 /* ---- stored tab groups (activateTabGroups) --------------------------------
    Only the active panel shows. Before the script runs, the first tab's content
    stands in for the group rather than every tab at once. */
@@ -489,144 +639,3 @@ pre:hover > .code-copy-btn,
   max-width: 100%;
   min-height: 200px;
 }
-
-/* ==== the look ================================================================
-   What the components above look like, drawn from twelve tokens a site maps
-   once from its own palette, unlayered so the mapping wins:
-
-     --ui-surface    a card's ground         --ui-muted     secondary text
-     --ui-surface-2  a strip, a label cell   --ui-accent    links, the current item
-     --ui-border     every rule and outline  --ui-on-accent text on the accent
-     --ui-radius     every corner            --ui-up        a good change, an insertion
-     --ui-pad        a card's padding        --ui-down      a bad change, a deletion
-     --ui-small      the small type size     --ui-shadow    a floating card's shadow
-
-   Four sites had each drawn these same components in their own tokens, the
-   same rules restated four ways, and the one that forgot a rule shipped it
-   unstyled. A site still overrides any of it with its own rule after this. */
-
-/* Permalink beside a heading: the glyph comes from here, so a table of contents
-   reading the heading's text never picks it up. */
-:is(h2, h3, h4, h5, h6):has(> .heading-anchor) { position: relative; }
-.heading-anchor { position: absolute; top: 0; left: -1.25rem; font-weight: 400; color: var(--ui-muted); opacity: 0; transition: opacity 0.15s; }
-.heading-anchor::before { content: '#'; }
-.heading-anchor:hover { color: var(--ui-accent); }
-:is(h2, h3, h4, h5, h6):hover > .heading-anchor,
-.heading-anchor:focus-visible { opacity: 1; }
-.link { color: var(--ui-accent); text-decoration: none; cursor: pointer; }
-.link:hover { text-decoration: underline; }
-
-/* Code tabs and the copy button. */
-.code-tabs { margin-block: 1rem; border: 1px solid var(--ui-border); border-radius: var(--ui-radius); }
-.code-tabs-list { overflow-x: auto; background: var(--ui-surface-2); border-bottom: 1px solid var(--ui-border); }
-.code-tabs-btn { padding: 0.5rem 1rem; font: inherit; font-size: var(--ui-small); color: var(--ui-muted); background: transparent; border: 0; border-bottom: 2px solid transparent; transition: color 0.15s; }
-.code-tabs-btn:hover { color: inherit; }
-/* The box clips, so the focus ring goes inside the button. */
-.code-tabs-btn:focus-visible { outline-offset: -2px; }
-.code-tabs-btn-active { color: var(--ui-accent); border-bottom-color: var(--ui-accent); }
-.code-tabs pre { margin: 0; border: 0; border-radius: 0; }
-.code-copy-btn { padding: 0.375rem; color: var(--ui-muted); background: var(--ui-surface); border: 1px solid var(--ui-border); border-radius: var(--ui-radius); z-index: 1; }
-.code-copy-btn:hover { color: var(--ui-accent); }
-
-/* Notices. A notice is a claim about the page, so it reads as an aside. */
-.editorial-banner { align-items: flex-start; gap: 0.75rem; margin-block: 0.75rem; padding: 0.75rem; font-size: var(--ui-small); background: var(--ui-surface); border: 1px solid var(--ui-border); border-radius: var(--ui-radius); }
-.editorial-banner-icon { flex-shrink: 0; margin-top: 0.125rem; }
-.editorial-banner-body { flex: 1; min-width: 0; margin: 0; }
-:is(.editorial-banner-unsourced, .editorial-banner-outdated, .editorial-banner-promotional, .editorial-banner-coi) { border-color: color-mix(in srgb, var(--ui-down) 35%, transparent); background: color-mix(in srgb, var(--ui-down) 8%, var(--ui-surface)); }
-:is(.editorial-banner-unsourced, .editorial-banner-outdated, .editorial-banner-promotional, .editorial-banner-coi) .editorial-banner-icon { color: var(--ui-down); }
-
-/* References. */
-.references-block { margin-top: 1.5rem; padding-top: 1rem; border-top: 1px solid var(--ui-border); }
-.references-block h2 { margin: 0 0 0.5rem; }
-.references-list { margin: 0; padding-left: 1.5rem; list-style: decimal; font-size: var(--ui-small); color: var(--ui-muted); }
-.reference-item { margin-block: 0.25rem; padding-left: 0.25rem; scroll-margin-top: 5rem; }
-.reference-item:target { background: color-mix(in srgb, var(--ui-accent) 12%, transparent); border-radius: var(--ui-radius); }
-:is(.reference-item a, .ref-backlink, .reference-link) { color: var(--ui-accent); }
-:is(.reference-item a, .ref-backlink, .reference-link):hover { text-decoration: underline; }
-
-/* The infobox and its facts. Labels are short and values are the reading, so
-   the label column takes 42%, the floor that still fits "Published:". */
-.page-with-infobox { gap: 1.5rem; }
-.infobox { padding: var(--ui-pad); background: var(--ui-surface); border: 1px solid var(--ui-border); border-radius: var(--ui-radius); }
-.infobox table { table-layout: fixed; width: 100%; border-collapse: collapse; }
-.infobox :is(th, td) { padding: 0.375rem 0.5rem; font-size: var(--ui-small); text-align: left; vertical-align: top; border: 0; border-bottom: 1px solid var(--ui-border); }
-.infobox th { width: 42%; font-weight: 600; color: var(--ui-muted); }
-.infobox tr:last-child > :is(th, td) { border-bottom: 0; }
-.infobox-facts { margin: 0; }
-.infobox-series { align-items: center; gap: 0.125rem; margin-bottom: 0.75rem; padding-bottom: 0.75rem; text-align: center; font-size: var(--ui-small); color: var(--ui-muted); border-bottom: 1px solid var(--ui-border); }
-
-/* Stats blocks and the figures' change from the window before. */
-.stat-grid { gap: 0.75rem; }
-.stat-card { gap: 0.25rem; padding: var(--ui-pad); background: var(--ui-surface); border-radius: var(--ui-radius); }
-.stat-value { font-weight: 700; line-height: 1.15; }
-.stat-label { font-size: var(--ui-small); color: var(--ui-muted); }
-.stats-delta { font-size: 0.6em; font-weight: 600; }
-.stats-delta[data-better='true'] { color: var(--ui-up); }
-.stats-delta[data-better='false'] { color: var(--ui-down); }
-
-/* Columns, link grids, related pages. */
-.column-view { gap: 1rem; }
-.link-grid { display: flex; flex-direction: column; gap: 1rem; margin-block: 1rem; }
-.link-grid-group-description { margin: 0 0 0.75rem; color: var(--ui-muted); }
-.link-grid-group-description p { margin: 0; }
-.link-grid-pills { display: grid; grid-template-columns: repeat(auto-fit, minmax(10rem, 1fr)); gap: 0.5rem; }
-.link-grid-pills > a { display: block; padding: 0.625rem 0.875rem; font-size: var(--ui-small); text-align: center; text-decoration: none; color: inherit; background: var(--ui-surface); border: 1px solid var(--ui-border); border-radius: var(--ui-radius); transition: background 0.15s, border-color 0.15s, color 0.15s; }
-.link-grid-pills > a:hover { color: var(--ui-accent); background: var(--ui-surface-2); border-color: var(--ui-accent); }
-.see-also-list { display: grid; grid-template-columns: repeat(auto-fill, minmax(14rem, 1fr)); gap: 0.75rem; margin: 0; padding: 0; list-style: none; }
-.see-also-item { display: flex; flex-direction: column; gap: 0.25rem; min-width: 0; padding: 0.75rem; color: inherit; text-decoration: none; background: var(--ui-surface); border: 1px solid var(--ui-border); border-radius: var(--ui-radius); transition: border-color 0.15s; }
-.see-also-item:hover { border-color: var(--ui-accent); }
-.see-also-title { font-weight: 600; }
-.see-also-item:hover .see-also-title { color: var(--ui-accent); }
-.see-also-detail { font-size: var(--ui-small); color: var(--ui-muted); display: -webkit-box; -webkit-line-clamp: 2; -webkit-box-orient: vertical; overflow: hidden; }
-.section-card { display: flex; flex-direction: column; gap: 0.5rem; padding: var(--ui-pad); background: var(--ui-surface); border: 1px solid var(--ui-border); border-radius: var(--ui-radius); transition: border-color 0.15s; }
-/* A page list as rows (PageRefsView): one panel, a rule between rows. radix-wiki dropped its own rule for this on 0.86 and the package drew none. */
-.page-refs { display: flex; flex-direction: column; margin: 0; padding: 0; list-style: none; overflow: hidden; background: var(--ui-surface); border: 1px solid var(--ui-border); border-radius: var(--ui-radius); }
-.page-refs > li + li { border-top: 1px solid var(--ui-border); }
-.section-card:hover { border-color: var(--ui-accent); }
-.facet-summary { margin: 0; font-size: var(--ui-small); color: var(--ui-muted); }
-
-/* The hover card over a link to another page (useLinkPreview). */
-.link-preview-card { position: fixed; z-index: 50; width: 20rem; max-width: calc(100vw - 1rem); overflow: hidden; background: var(--ui-surface); border: 1px solid var(--ui-border); border-radius: var(--ui-radius); box-shadow: var(--ui-shadow); }
-.link-preview-body { display: flex; flex-direction: column; gap: 0.25rem; padding: 0.75rem; }
-.link-preview-title { font-weight: 600; }
-.link-preview-excerpt { margin: 0; font-size: var(--ui-small); color: var(--ui-muted); display: -webkit-box; -webkit-line-clamp: 4; -webkit-box-orient: vertical; overflow: hidden; }
-
-/* The rail's frame and its table of contents. */
-.wiki-sidebar { --rail-border: 1px solid var(--ui-border); }
-.wiki-rail__group, .wiki-rail__toc-list { display: flex; flex-direction: column; gap: 1px; }
-.wiki-rail__label { padding: 0 0.5rem 0.25rem; font-size: var(--ui-small); font-weight: 600; letter-spacing: 0.04em; text-transform: uppercase; color: var(--ui-muted); }
-:is(.wiki-rail__toc-btn, .wiki-rail__toc-item) { display: flex; align-items: center; gap: 0.25rem; width: 100%; font: inherit; text-align: left; color: var(--ui-muted); background: none; border: 0; cursor: pointer; }
-.wiki-rail__toc-btn { padding: 0 0.5rem 0.25rem; }
-.wiki-rail__toc-item { padding: 0.25rem 0.75rem; font-size: var(--ui-small); line-height: 1.4; text-decoration: none; border-inline-start: 2px solid var(--ui-border); transition: color 0.15s, border-color 0.15s; }
-.wiki-rail__toc-item:hover, .wiki-rail__toc-item--active { color: var(--ui-accent); border-inline-start-color: var(--ui-accent); }
-.wiki-rail__toc-item--active { font-weight: 600; }
-
-/* Work queues (MaintenanceQueues). */
-.maintenance-queue { display: flex; flex-direction: column; gap: 0.5rem; padding-top: 1.5rem; border-top: 1px solid var(--ui-border); }
-.maintenance-count { margin-left: 0.5rem; font-weight: 400; font-variant-numeric: tabular-nums; color: var(--ui-muted); }
-.maintenance-description, .maintenance-detail { color: var(--ui-muted); }
-.maintenance-detail { font-size: var(--ui-small); }
-.maintenance-list { display: grid; gap: 0.375rem; margin: 0; padding: 0; list-style: none; }
-.maintenance-item { display: flex; flex-wrap: wrap; align-items: baseline; gap: 0.25rem 0.5rem; }
-.maintenance-item > a { color: var(--ui-accent); }
-
-/* A revision's changes and its inline diff. */
-.revision-change-action { font-weight: 600; color: var(--ui-muted); }
-.revision-change[data-action='added'] .revision-change-action { color: var(--ui-up); }
-.revision-change[data-action='removed'] .revision-change-action { color: var(--ui-down); }
-.revision-diff { line-height: 1.6; color: var(--ui-muted); }
-.revision-diff del { color: var(--ui-down); }
-.revision-diff ins { color: var(--ui-up); text-decoration: none; background: color-mix(in srgb, var(--ui-up) 12%, transparent); border-radius: 2px; }
-
-/* Sortable headers: muted until hovered or sorted by. */
-.sort-header { color: var(--ui-muted); transition: color 0.15s; }
-.sort-header:hover,
-:is([aria-sort='ascending'], [aria-sort='descending']) > .sort-header { color: inherit; }
-
-/* Charts. */
-.chart { background: var(--ui-surface); border: 1px solid var(--ui-border); border-radius: var(--ui-radius); }
-.chart-canvas { font-size: 0.6875rem; color: var(--ui-accent); --chart-axis: var(--ui-muted); --chart-up: var(--ui-up); --chart-down: var(--ui-down); }
-.chart-status { font-size: var(--ui-small); color: var(--ui-muted); }
-.chart-controls :is(button, a) { font-size: 0.6875rem; border: 1px solid var(--ui-border); border-radius: var(--ui-radius); opacity: 1; }
-.chart-controls :is(button, a):hover { background: var(--ui-surface-2); }
-.chart-controls :is(button, a):is([aria-pressed='true'], [aria-current]) { color: var(--ui-on-accent); background: var(--ui-accent); border-color: var(--ui-accent); }

package/dist/blocks.d.ts

@@ -126,8 +126,6 @@ export interface InfoboxBlock<A> {
     type: 'infobox';
     blocks: A[];
 }
-/** A wiki's whole block union from its atomic one: the leaves and the two containers holding them. */
-export type BlockTree<A> = A | InfoboxBlock<A> | ColumnsBlock<A>;
 /** Where a list's pages come from: those in a section, the newest, or ones picked by hand. */
 export declare const LIST_SOURCES: readonly ["under", "newest", "chosen"];
 export type ListSource = (typeof LIST_SOURCES)[number];
@@ -406,3 +404,8 @@ export interface CoreBlockDefaults {
  * `{ ...coreBlockDefaults({ stats }), daoTimeline: () => … }`.
  */
 export declare function coreBlockDefaults(opts?: CoreBlockDefaultsOptions): CoreBlockDefaults;
+/** A wiki's whole tree: its leaves, and the two containers over them. */
+export type BlockTree<A extends {
+    id: string;
+    type: string;
+}> = A | InfoboxBlock<A> | ColumnsBlock<A>;

package/dist/headers.d.ts

@@ -11,18 +11,14 @@ export interface HeaderEntry {
 export declare const DEFAULT_IFRAME_HOSTS: readonly string[];
 /** CSP directive names this builder writes, in the order it writes them. */
 export type CspDirective = 'default-src' | 'base-uri' | 'object-src' | 'frame-ancestors' | 'form-action' | 'script-src' | 'style-src' | 'font-src' | 'img-src' | 'media-src' | 'connect-src' | 'frame-src' | 'worker-src' | 'manifest-src';
-/** A `script-src` source admitting exactly this inline script body. */
+/** A `'sha256-…'` source for one inline script's body, so a nonced policy still runs it. */
 export declare const scriptHash: (body: string) => string;
 /**
  * The policy string: `BASE_CSP` with each directive in `directives` replacing
- * its default. An empty list drops the directive.
- *
- * A `nonce` swaps `script-src` for the strict form, `'self'`, the nonce and a
- * hash of each of `inlineScripts`, with no `'unsafe-inline'`. The hashes admit
- * a static boot script without the layout reading the nonce, which would make
- * every route render per request; hashing here means a package bump that
- * changes the script moves its hash too, where a hand-copied one went stale
- * and blanked every nonce route. Without a nonce the baseline stands.
+ * its default. An empty list drops the directive. With a `nonce`, `script-src`
+ * is that nonce and the hashes of `inlineScripts` instead of `'unsafe-inline'`:
+ * the per-request policy an origin sets in its proxy, which Next reads from
+ * the request's `content-security-policy` header to nonce its own scripts.
  */
 export declare function contentSecurityPolicy(directives?: Partial<Record<CspDirective, readonly string[]>>, { nonce, inlineScripts }?: {
     nonce?: string | null;

package/dist/headers.js

@@ -11,9 +11,8 @@
 // `youtube-nocookie.com` its sanitiser kept, so those embeds survived cleaning
 // and then rendered blank.
 //
-// One import, node:crypto for a script's hash, so a config pays for nothing
-// else. `withWikiDefaults` is here for the same reason: next.config.ts is its
-// only caller.
+// Zero imports, so a config pays for nothing it does not use. `withWikiDefaults`
+// is here for the same reason: next.config.ts is its only caller.
 import { createHash } from 'node:crypto';
 /**
  * The embed hosts the editor's iframe, YouTube, tweet and map nodes produce:
@@ -52,22 +51,20 @@ export const BASE_CSP = {
     'connect-src': ["'self'"],
     'frame-src': frameSources(),
 };
-/** A `script-src` source admitting exactly this inline script body. */
+/** A `'sha256-…'` source for one inline script's body, so a nonced policy still runs it. */
 export const scriptHash = (body) => `'sha256-${createHash('sha256').update(body, 'utf8').digest('base64')}'`;
 /**
  * The policy string: `BASE_CSP` with each directive in `directives` replacing
- * its default. An empty list drops the directive.
- *
- * A `nonce` swaps `script-src` for the strict form, `'self'`, the nonce and a
- * hash of each of `inlineScripts`, with no `'unsafe-inline'`. The hashes admit
- * a static boot script without the layout reading the nonce, which would make
- * every route render per request; hashing here means a package bump that
- * changes the script moves its hash too, where a hand-copied one went stale
- * and blanked every nonce route. Without a nonce the baseline stands.
+ * its default. An empty list drops the directive. With a `nonce`, `script-src`
+ * is that nonce and the hashes of `inlineScripts` instead of `'unsafe-inline'`:
+ * the per-request policy an origin sets in its proxy, which Next reads from
+ * the request's `content-security-policy` header to nonce its own scripts.
  */
-export function contentSecurityPolicy(directives = {}, { nonce = null, inlineScripts = [] } = {}) {
-    const strict = nonce ? { 'script-src': ["'self'", `'nonce-${nonce}'`, ...inlineScripts.map(scriptHash)] } : {};
-    return Object.entries({ ...BASE_CSP, ...directives, ...strict })
+export function contentSecurityPolicy(directives = {}, { nonce, inlineScripts = [] } = {}) {
+    const scripts = nonce
+        ? { 'script-src': ["'self'", `'nonce-${nonce}'`, ...inlineScripts.map(scriptHash)] }
+        : {};
+    return Object.entries({ ...BASE_CSP, ...directives, ...scripts })
         .filter(([, sources]) => sources?.length)
         .map(([name, sources]) => `${name} ${sources.join(' ')}`)
         .join('; ');

package/dist/knip.d.ts

@@ -1,8 +1,8 @@
-declare const _default: {
+declare const config: {
+    $schema: string;
     entry: string[];
     project: string[];
-    ignore: string[];
     ignoreDependencies: string[];
     ignoreBinaries: string[];
 };
-export default _default;
+export default config;