From 9d112e900e855ff6838e7ff9fa132e793acb4220 Mon Sep 17 00:00:00 2001
From: scanner <scanner@hive.kubestellar.io>
Date: Mon, 5 Oct 2026 23:32:57 -0400
Subject: [PATCH 1/5] ci: check out live main in meeting-recordings refresh so
 auto-commit does not race

Signed-off-by: scanner <scanner@hive.kubestellar.io>
---
 .github/workflows/meeting-recordings-refresh.yml         | 6 ++++++
 changelog.d/fixed-meeting-recordings-refresh-checkout.md | 1 +
 2 files changed, 7 insertions(+)
 create mode 100644 changelog.d/fixed-meeting-recordings-refresh-checkout.md

diff --git a/.github/workflows/meeting-recordings-refresh.yml b/.github/workflows/meeting-recordings-refresh.yml
index c8ae70d..29b4a54 100644
--- a/.github/workflows/meeting-recordings-refresh.yml
+++ b/.github/workflows/meeting-recordings-refresh.yml
@@ -16,6 +16,12 @@ jobs:
     timeout-minutes: 10
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          # On `schedule`, github.sha is main as of trigger time. If the job sits in
+          # the runner queue (run 37370568225 waited 70 min) that base is stale and
+          # the auto-commit push below is rejected non-fast-forward. Checking out the
+          # branch by name fetches the live tip at job start instead.
+          ref: main
       - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: '22'
diff --git a/changelog.d/fixed-meeting-recordings-refresh-checkout.md b/changelog.d/fixed-meeting-recordings-refresh-checkout.md
new file mode 100644
index 0000000..cf68505
--- /dev/null
+++ b/changelog.d/fixed-meeting-recordings-refresh-checkout.md
@@ -0,0 +1 @@
+- Check out live `main` in the meeting-recordings refresh workflow so the scheduled auto-commit no longer fails with a non-fast-forward push when the job is queued.

From 1d875f994e2848e533dd5a0d1b577b7d2e9af863 Mon Sep 17 00:00:00 2001
From: scanner <scanner@hive.kubestellar.io>
Date: Mon, 5 Oct 2026 23:35:48 -0400
Subject: [PATCH 2/5] style: apply prettier to the repository

Signed-off-by: scanner <scanner@hive.kubestellar.io>
---
 .github/aw/github-agentic-workflows.md        |  716 +++++-----
 .github/fuzzing/fuzz-mdx-sanitizer.ts         |  212 +--
 .github/workflows/markdownlint-cli2.yml       |    2 +-
 .../workflows/meeting-recordings-refresh.yml  |    6 +-
 .github/workflows/scorecard.yml               |    2 +-
 .github/workflows/typecheck.yml               |    2 +-
 .github/workflows/vitest.yml                  |    2 +-
 CONTRIBUTING.md                               |    1 -
 eslint.config.mjs                             |   16 +-
 mdx-components.js                             |   23 +-
 netlify/functions/nps.mts                     |   32 +-
 netlify/nps-relay/relay.test.ts               | 1262 ++++++++++-------
 netlify/nps-relay/relay.ts                    |  838 ++++++-----
 public/403.html                               |  300 ++--
 public/404.html                               |  300 ++--
 runbooks/README.md                            |    4 +-
 scripts/check-internal-links-helpers.test.ts  |   44 +-
 scripts/check-internal-links-helpers.ts       |    4 +-
 scripts/check-internal-links.ts               |    2 +-
 scripts/generate-shared-config.test.ts        |   28 +-
 scripts/generate-shared-config.ts             |   40 +-
 scripts/markdown-fences.test.ts               |    8 +-
 scripts/markdown-fences.ts                    |    3 +-
 scripts/mdx-to-markdown.test.ts               |   58 +-
 scripts/mdx-to-markdown.ts                    |   90 +-
 scripts/npm-audit-gate.test.ts                |   14 +-
 scripts/npm-audit-gate.ts                     |   14 +-
 scripts/scrub-legacy-branding.test.ts         |   30 +-
 scripts/scrub-legacy-branding.ts              |   65 +-
 .../sync-hive-docs.case-1-exact-path.test.ts  |   11 +-
 scripts/sync-hive-docs.ts                     |    7 +-
 scripts/sync-sibling-docs.test.ts             |   58 +-
 scripts/sync-sibling-docs.ts                  |  217 ++-
 scripts/update-meeting-recordings.ts          |  190 ++-
 src/__tests__/DocsFooter.behavior.test.tsx    |   29 +-
 src/__tests__/DocsFooter.copy.test.ts         |   69 +-
 .../ErrorFallbackUI.behavior.test.tsx         |   10 +-
 src/__tests__/Footer.behavior.test.tsx        |   49 +-
 .../LanguageSwitcher.behavior.test.tsx        |    8 +-
 src/__tests__/MeetingsPage.behavior.test.tsx  |  471 +++---
 src/__tests__/Navbar.behavior.test.tsx        |   35 +-
 src/__tests__/NotFoundUI.behavior.test.tsx    |   49 +-
 src/__tests__/NotFoundUI.copy.test.ts         |   56 +-
 .../RelatedProjects.behavior.test.tsx         |   50 +-
 .../TableOfContents.behavior.test.tsx         |    6 +-
 src/__tests__/ThemeToggle.behavior.test.tsx   |   16 +-
 .../VersionSelector.behavior.test.tsx         |    9 +-
 .../buildPageMapForBranch-wrapper.test.ts     |   67 +-
 .../check-internal-links-helpers.test.ts      |   35 +-
 .../communityMeetingsSchedule.test.ts         |  103 +-
 ...docs-image-route.containment-guard.test.ts |   65 +-
 .../docs-image-route.readfile-throws.test.ts  |   56 +-
 src/__tests__/docs-image-route.test.ts        |  255 ++--
 .../docs-layout.metadata-jsonld.test.tsx      |  354 +++--
 .../docs-page-render.spektacular.test.ts      |  148 +-
 src/__tests__/docs-page-render.test.ts        |   95 +-
 .../docs-slug-page.params-metadata.test.tsx   |  333 +++--
 src/__tests__/fetchConfig.test.ts             |  370 ++---
 src/__tests__/gtagEvent.test.ts               |  102 +-
 src/__tests__/healthz-route.test.ts           |  219 +--
 src/__tests__/i18n-settings.test.ts           |   64 +-
 src/__tests__/logger.test.ts                  |   58 +-
 src/__tests__/metrics-3xx-branch.test.ts      |   42 +-
 src/__tests__/metrics-edge-branches.test.ts   |   78 +-
 src/__tests__/metrics-route.test.ts           |   26 +-
 src/__tests__/metrics.test.ts                 |   42 +-
 src/__tests__/page-map-hive-arm.test.ts       |  101 +-
 src/__tests__/proxy.test.ts                   |  165 ++-
 src/__tests__/remarkStripMdxJs.test.ts        |  221 +--
 src/__tests__/rewriteImagePaths.test.ts       |  127 +-
 src/__tests__/robots.test.ts                  |   20 +-
 .../sanitize.contributor-and-img.test.ts      |  218 +--
 ...anitize.contributor-non-github-url.test.ts |   68 +-
 .../sanitize.contributor-nongithub.test.ts    |   46 +-
 src/__tests__/sanitize.test.ts                |  711 ++++++----
 src/__tests__/search-route.extra.test.ts      |  296 ++--
 .../search-route.hive-project-file.test.ts    |  112 +-
 .../search-route.non-error-throw.test.ts      |   87 +-
 .../search-route.sort-comparator.test.ts      |  139 +-
 src/__tests__/search-route.test.ts            |  212 +--
 .../search-route.title-only-long.test.ts      |   88 +-
 src/__tests__/sitemap.test.ts                 |  217 +--
 ...nsformMdx.escaped-bracket-fallback.test.ts |   36 +-
 .../transformMdx.escaped-close.test.ts        |   44 +-
 src/__tests__/transformMdx.lt-paren.test.ts   |   42 +-
 src/__tests__/transformMdx.test.ts            |  612 ++++----
 ...ransformMdx.tilde-fence-and-closer.test.ts |   87 +-
 src/__tests__/url.getLocalizedUrl.test.ts     |  138 +-
 src/__tests__/url.test.ts                     |  174 +--
 src/__tests__/useGithubStats.effect.test.tsx  |  150 +-
 src/__tests__/useGithubStats.test.tsx         |   86 +-
 src/__tests__/useSharedConfig.fetch.test.ts   |  343 +++--
 src/__tests__/useSharedConfig.hook.test.tsx   |  188 +--
 ...aredConfig.merge-fallback-branches.test.ts |  227 +--
 src/__tests__/useSharedConfig.test.ts         |  201 +--
 src/__tests__/versions.test.ts                |  310 ++--
 src/app/[locale]/layout.tsx                   |   24 +-
 src/app/api/docs-image/[...path]/route.ts     |   94 +-
 src/app/api/healthz/route.ts                  |   54 +-
 src/app/api/metrics/route.ts                  |    8 +-
 src/app/api/search/route.ts                   |  183 +--
 src/app/error.tsx                             |    7 +-
 src/app/globals.css                           |  202 ++-
 src/app/robots.ts                             |   10 +-
 src/app/sitemap.ts                            |  109 +-
 src/components/ErrorFallbackUI.tsx            |   46 +-
 src/components/Footer.tsx                     |   18 +-
 src/components/GoogleAnalytics.tsx            |    2 +-
 src/components/Navbar.tsx                     |  103 +-
 src/components/NotFoundUI.tsx                 |   83 +-
 .../animations/globe/NetworkGlobe.tsx         |    1 -
 src/components/community/MeetingsPage.tsx     |  370 +++--
 src/components/navbar/useNavDropdowns.ts      |    4 +-
 src/config/community-meetings.ts              |   56 +-
 src/config/versions.ts                        |  126 +-
 src/hooks/useSharedConfig.ts                  |   57 +-
 src/lib/communityMeetingsSchedule.ts          |  159 ++-
 src/lib/logger.ts                             |   28 +-
 src/lib/metrics.ts                            |   34 +-
 src/lib/remarkStripMdxJs.ts                   |   45 +-
 src/lib/rewriteImagePaths.ts                  |   25 +-
 src/lib/sanitizeHtml.ts                       |  371 ++---
 src/lib/transformMdx.ts                       |   10 +-
 src/lib/url.ts                                |    2 +-
 src/proxy.ts                                  |   14 +-
 tsconfig.json                                 |   15 +-
 vitest.config.ts                              |   33 +-
 127 files changed, 8977 insertions(+), 6752 deletions(-)

diff --git a/.github/aw/github-agentic-workflows.md b/.github/aw/github-agentic-workflows.md
index 115efca..d96b749 100644
--- a/.github/aw/github-agentic-workflows.md
+++ b/.github/aw/github-agentic-workflows.md
@@ -158,362 +158,364 @@ The YAML frontmatter supports these fields:
        version: "3.12"
        action-repo: "actions/setup-python"
        action-version: "v5"
- ```
-
-- **`jobs:`** - Groups together all the jobs that run in the workflow (object)
-  - Standard GitHub Actions jobs configuration
-  - Each job can have: `name`, `runs-on`, `steps`, `needs`, `if`, `env`, `permissions`, `timeout-minutes`, etc.
-  - For most agentic workflows, jobs are auto-generated; only specify this for advanced multi-job workflows
-  - Example:
-    ```yaml
-    jobs:
-      custom-job:
-        runs-on: ubuntu-latest
-        steps:
-          - name: Custom step
-            run: echo "Custom job"
-    ```
-
-- **`engine:`** - AI processor configuration
-  - String format: `"copilot"` (default, recommended), `"custom"` (user-defined steps)
-  - ⚠️ **Experimental engines**: `"claude"` and `"codex"` are available but experimental
-  - Object format for extended configuration:
-    ```yaml
-    engine:
-      id: copilot # Required: coding agent identifier (copilot, custom, or experimental: claude, codex)
-      version: beta # Optional: version of the action (has sensible default)
-      model: gpt-5 # Optional: LLM model to use (has sensible default)
-      max-turns: 5 # Optional: maximum chat iterations per run (has sensible default)
-      max-concurrency: 3 # Optional: max concurrent workflows across all workflows (default: 3)
-      env: # Optional: custom environment variables (object)
-        DEBUG_MODE: "true"
-      args: ["--verbose"] # Optional: custom CLI arguments injected before prompt (array)
-      error_patterns: # Optional: custom error pattern recognition (array)
-        - pattern: "ERROR: (.+)"
-          level_group: 1
-    ```
-  - **Note**: The `version`, `model`, `max-turns`, and `max-concurrency` fields have sensible defaults and can typically be omitted unless you need specific customization.
-  - **Custom engine format** (⚠️ experimental):
-
-    ```yaml
-    engine:
-      id: custom # Required: custom engine identifier
-      max-turns: 10 # Optional: maximum iterations (for consistency)
-      max-concurrency: 5 # Optional: max concurrent workflows (for consistency)
-      steps: # Required: array of custom GitHub Actions steps
-        - name: Run tests
-          run: npm test
     ```
 
-    The `custom` engine allows you to define your own GitHub Actions steps instead of using an AI processor. Each step in the `steps` array follows standard GitHub Actions step syntax with `name`, `uses`/`run`, `with`, `env`, etc. This is useful for deterministic workflows that don't require AI processing.
-
-    **Environment Variables Available to Custom Engines:**
-
-    Custom engine steps have access to the following environment variables:
-    - **`$GH_AW_PROMPT`**: Path to the generated prompt file (`/tmp/gh-aw/aw-prompts/prompt.txt`) containing the markdown content from the workflow. This file contains the natural language instructions that would normally be sent to an AI processor. Custom engines can read this file to access the workflow's markdown content programmatically.
-    - **`$GH_AW_SAFE_OUTPUTS`**: Path to the safe outputs file (when safe-outputs are configured). Used for writing structured output that gets processed automatically.
-    - **`$GH_AW_MAX_TURNS`**: Maximum number of turns/iterations (when max-turns is configured in engine config).
+````
 
-    Example of accessing the prompt content:
-
-    ```bash
-    # Read the workflow prompt content
-    cat $GH_AW_PROMPT
+- **`jobs:`** - Groups together all the jobs that run in the workflow (object)
+ - Standard GitHub Actions jobs configuration
+ - Each job can have: `name`, `runs-on`, `steps`, `needs`, `if`, `env`, `permissions`, `timeout-minutes`, etc.
+ - For most agentic workflows, jobs are auto-generated; only specify this for advanced multi-job workflows
+ - Example:
+   ```yaml
+   jobs:
+     custom-job:
+       runs-on: ubuntu-latest
+       steps:
+         - name: Custom step
+           run: echo "Custom job"
+   ```
 
-    # Process the prompt content in a custom step
-    - name: Process workflow instructions
-      run: |
-        echo "Workflow instructions:"
-        cat $GH_AW_PROMPT
-        # Add your custom processing logic here
-    ```
+- **`engine:`** - AI processor configuration
+ - String format: `"copilot"` (default, recommended), `"custom"` (user-defined steps)
+ - ⚠️ **Experimental engines**: `"claude"` and `"codex"` are available but experimental
+ - Object format for extended configuration:
+   ```yaml
+   engine:
+     id: copilot # Required: coding agent identifier (copilot, custom, or experimental: claude, codex)
+     version: beta # Optional: version of the action (has sensible default)
+     model: gpt-5 # Optional: LLM model to use (has sensible default)
+     max-turns: 5 # Optional: maximum chat iterations per run (has sensible default)
+     max-concurrency: 3 # Optional: max concurrent workflows across all workflows (default: 3)
+     env: # Optional: custom environment variables (object)
+       DEBUG_MODE: "true"
+     args: ["--verbose"] # Optional: custom CLI arguments injected before prompt (array)
+     error_patterns: # Optional: custom error pattern recognition (array)
+       - pattern: "ERROR: (.+)"
+         level_group: 1
+   ```
+ - **Note**: The `version`, `model`, `max-turns`, and `max-concurrency` fields have sensible defaults and can typically be omitted unless you need specific customization.
+ - **Custom engine format** (⚠️ experimental):
+
+   ```yaml
+   engine:
+     id: custom # Required: custom engine identifier
+     max-turns: 10 # Optional: maximum iterations (for consistency)
+     max-concurrency: 5 # Optional: max concurrent workflows (for consistency)
+     steps: # Required: array of custom GitHub Actions steps
+       - name: Run tests
+         run: npm test
+   ```
+
+   The `custom` engine allows you to define your own GitHub Actions steps instead of using an AI processor. Each step in the `steps` array follows standard GitHub Actions step syntax with `name`, `uses`/`run`, `with`, `env`, etc. This is useful for deterministic workflows that don't require AI processing.
+
+   **Environment Variables Available to Custom Engines:**
+
+   Custom engine steps have access to the following environment variables:
+   - **`$GH_AW_PROMPT`**: Path to the generated prompt file (`/tmp/gh-aw/aw-prompts/prompt.txt`) containing the markdown content from the workflow. This file contains the natural language instructions that would normally be sent to an AI processor. Custom engines can read this file to access the workflow's markdown content programmatically.
+   - **`$GH_AW_SAFE_OUTPUTS`**: Path to the safe outputs file (when safe-outputs are configured). Used for writing structured output that gets processed automatically.
+   - **`$GH_AW_MAX_TURNS`**: Maximum number of turns/iterations (when max-turns is configured in engine config).
+
+   Example of accessing the prompt content:
+
+   ```bash
+   # Read the workflow prompt content
+   cat $GH_AW_PROMPT
+
+   # Process the prompt content in a custom step
+   - name: Process workflow instructions
+     run: |
+       echo "Workflow instructions:"
+       cat $GH_AW_PROMPT
+       # Add your custom processing logic here
+   ```
 
 - **`network:`** - Network access control for AI engines (top-level field)
-  - String format: `"defaults"` (curated allow-list of development domains)
-  - Empty object format: `{}` (no network access)
-  - Object format for custom permissions:
-    ```yaml
-    network:
-      allowed:
-        - "example.com"
-        - "*.trusted-domain.com"
-      firewall: true # Optional: Enable AWF (Agent Workflow Firewall) for Copilot engine
-    ```
-  - **Firewall configuration** (Copilot engine only):
-    ```yaml
-    network:
-      firewall:
-        version: "v1.0.0" # Optional: AWF version (defaults to latest)
-        log-level: debug # Optional: debug, info (default), warn, error
-        args: ["--custom-arg", "value"] # Optional: additional AWF arguments
-    ```
+ - String format: `"defaults"` (curated allow-list of development domains)
+ - Empty object format: `{}` (no network access)
+ - Object format for custom permissions:
+   ```yaml
+   network:
+     allowed:
+       - "example.com"
+       - "*.trusted-domain.com"
+     firewall: true # Optional: Enable AWF (Agent Workflow Firewall) for Copilot engine
+   ```
+ - **Firewall configuration** (Copilot engine only):
+   ```yaml
+   network:
+     firewall:
+       version: "v1.0.0" # Optional: AWF version (defaults to latest)
+       log-level: debug # Optional: debug, info (default), warn, error
+       args: ["--custom-arg", "value"] # Optional: additional AWF arguments
+   ```
 - **`tools:`** - Tool configuration for coding agent
-  - `github:` - GitHub API tools
-    - `allowed:` - Array of allowed GitHub API functions
-    - `mode:` - "local" (Docker, default) or "remote" (hosted)
-    - `version:` - MCP server version (local mode only)
-    - `args:` - Additional command-line arguments (local mode only)
-    - `read-only:` - Restrict to read-only operations (boolean)
-    - `github-token:` - Custom GitHub token
-    - `toolsets:` - Enable specific GitHub toolset groups (array only)
-      - **Default toolsets** (when unspecified): `context`, `repos`, `issues`, `pull_requests`, `users`
-      - **All toolsets**: `context`, `repos`, `issues`, `pull_requests`, `actions`, `code_security`, `dependabot`, `discussions`, `experiments`, `gists`, `labels`, `notifications`, `orgs`, `projects`, `secret_protection`, `security_advisories`, `stargazers`, `users`, `search`
-      - Use `[default]` for recommended toolsets, `[all]` to enable everything
-      - Examples: `toolsets: [default]`, `toolsets: [default, discussions]`, `toolsets: [repos, issues]`
-      - **Recommended**: Prefer `toolsets:` over `allowed:` for better organization and reduced configuration verbosity
-  - `agentic-workflows:` - GitHub Agentic Workflows MCP server for workflow introspection
-    - Provides tools for:
-      - `status` - Show status of workflow files in the repository
-      - `compile` - Compile markdown workflows to YAML
-      - `logs` - Download and analyze workflow run logs
-      - `audit` - Investigate workflow run failures and generate reports
-    - **Use case**: Enable AI agents to analyze GitHub Actions traces and improve workflows based on execution history
-    - **Example**: Configure with `agentic-workflows: true` or `agentic-workflows:` (no additional configuration needed)
-  - `edit:` - File editing tools (required to write to files in the repository)
-  - `web-fetch:` - Web content fetching tools
-  - `web-search:` - Web search tools
-  - `bash:` - Shell command tools
-  - `playwright:` - Browser automation tools
-  - Custom tool names for MCP servers
+ - `github:` - GitHub API tools
+   - `allowed:` - Array of allowed GitHub API functions
+   - `mode:` - "local" (Docker, default) or "remote" (hosted)
+   - `version:` - MCP server version (local mode only)
+   - `args:` - Additional command-line arguments (local mode only)
+   - `read-only:` - Restrict to read-only operations (boolean)
+   - `github-token:` - Custom GitHub token
+   - `toolsets:` - Enable specific GitHub toolset groups (array only)
+     - **Default toolsets** (when unspecified): `context`, `repos`, `issues`, `pull_requests`, `users`
+     - **All toolsets**: `context`, `repos`, `issues`, `pull_requests`, `actions`, `code_security`, `dependabot`, `discussions`, `experiments`, `gists`, `labels`, `notifications`, `orgs`, `projects`, `secret_protection`, `security_advisories`, `stargazers`, `users`, `search`
+     - Use `[default]` for recommended toolsets, `[all]` to enable everything
+     - Examples: `toolsets: [default]`, `toolsets: [default, discussions]`, `toolsets: [repos, issues]`
+     - **Recommended**: Prefer `toolsets:` over `allowed:` for better organization and reduced configuration verbosity
+ - `agentic-workflows:` - GitHub Agentic Workflows MCP server for workflow introspection
+   - Provides tools for:
+     - `status` - Show status of workflow files in the repository
+     - `compile` - Compile markdown workflows to YAML
+     - `logs` - Download and analyze workflow run logs
+     - `audit` - Investigate workflow run failures and generate reports
+   - **Use case**: Enable AI agents to analyze GitHub Actions traces and improve workflows based on execution history
+   - **Example**: Configure with `agentic-workflows: true` or `agentic-workflows:` (no additional configuration needed)
+ - `edit:` - File editing tools (required to write to files in the repository)
+ - `web-fetch:` - Web content fetching tools
+ - `web-search:` - Web search tools
+ - `bash:` - Shell command tools
+ - `playwright:` - Browser automation tools
+ - Custom tool names for MCP servers
 
 - **`safe-outputs:`** - Safe output processing configuration (preferred way to handle GitHub API write operations)
-  - `create-issue:` - Safe GitHub issue creation (bugs, features)
-
-    ```yaml
-    safe-outputs:
-      create-issue:
-        title-prefix: "[ai] " # Optional: prefix for issue titles
-        labels: [automation, agentic] # Optional: labels to attach to issues
-        assignees: [user1, copilot] # Optional: assignees (use 'copilot' for bot)
-        max: 5 # Optional: maximum number of issues (default: 1)
-        target-repo: "owner/repo" # Optional: cross-repository
-    ```
-
-    When using `safe-outputs.create-issue`, the main job does **not** need `issues: write` permission since issue creation is handled by a separate job with appropriate permissions.
-
-    **Temporary IDs and Sub-Issues:**
-    When creating multiple issues, use `temporary_id` (format: `aw_` + 12 hex chars) to reference parent issues before creation. References like `#aw_abc123def456` in issue bodies are automatically replaced with actual issue numbers. Use the `parent` field to create sub-issue relationships:
-
-    ```json
-    {"type": "create_issue", "temporary_id": "aw_abc123def456", "title": "Parent", "body": "Parent issue"}
-    {"type": "create_issue", "parent": "aw_abc123def456", "title": "Sub-task", "body": "References #aw_abc123def456"}
-    ```
-
-  - `close-issue:` - Close issues with comment
-    ```yaml
-    safe-outputs:
-      close-issue:
-        target: "triggering" # Optional: "triggering" (default), "*", or number
-        required-labels: [automated] # Optional: only close with any of these labels
-        required-title-prefix: "[bot]" # Optional: only close matching prefix
-        max: 20 # Optional: max closures (default: 1)
-        target-repo: "owner/repo" # Optional: cross-repository
-    ```
-  - `create-discussion:` - Safe GitHub discussion creation (status, audits, reports, logs)
-
-    ```yaml
-    safe-outputs:
-      create-discussion:
-        title-prefix: "[ai] " # Optional: prefix for discussion titles
-        category: "General" # Optional: discussion category name, slug, or ID (defaults to first category if not specified)
-        max: 3 # Optional: maximum number of discussions (default: 1)
-        target-repo: "owner/repo" # Optional: cross-repository
-    ```
-
-    The `category` field is optional and can be specified by name (e.g., "General"), slug (e.g., "general"), or ID (e.g., "DIC_kwDOGFsHUM4BsUn3"). If not specified, discussions will be created in the first available category. Category resolution tries ID first, then name, then slug.
-
-    When using `safe-outputs.create-discussion`, the main job does **not** need `discussions: write` permission since discussion creation is handled by a separate job with appropriate permissions.
-
-  - `close-discussion:` - Close discussions with comment and resolution
-    ```yaml
-    safe-outputs:
-      close-discussion:
-        target: "triggering" # Optional: "triggering" (default), "*", or number
-        required-category: "Ideas" # Optional: only close in category
-        required-labels: [resolved] # Optional: only close with labels
-        required-title-prefix: "[ai]" # Optional: only close matching prefix
-        max: 1 # Optional: max closures (default: 1)
-        target-repo: "owner/repo" # Optional: cross-repository
-    ```
-    Resolution reasons: `RESOLVED`, `DUPLICATE`, `OUTDATED`, `ANSWERED`.
-  - `add-comment:` - Safe comment creation on issues/PRs/discussions
-    ```yaml
-    safe-outputs:
-      add-comment:
-        max: 3 # Optional: maximum number of comments (default: 1)
-        target: "*" # Optional: target for comments (default: "triggering")
-        discussion: true # Optional: target discussions
-        target-repo: "owner/repo" # Optional: cross-repository
-    ```
-    When using `safe-outputs.add-comment`, the main job does **not** need `issues: write` or `pull-requests: write` permissions since comment creation is handled by a separate job with appropriate permissions.
-  - `create-pull-request:` - Safe pull request creation with git patches
-    ```yaml
-    safe-outputs:
-      create-pull-request:
-        title-prefix: "[ai] " # Optional: prefix for PR titles
-        labels: [automation, ai-agent] # Optional: labels to attach to PRs
-        reviewers: [user1, copilot] # Optional: reviewers (use 'copilot' for bot)
-        draft: true # Optional: create as draft PR (defaults to true)
-        if-no-changes: "warn" # Optional: "warn" (default), "error", or "ignore"
-        target-repo: "owner/repo" # Optional: cross-repository
-    ```
-    When using `output.create-pull-request`, the main job does **not** need `contents: write` or `pull-requests: write` permissions since PR creation is handled by a separate job with appropriate permissions.
-  - `create-pull-request-review-comment:` - Safe PR review comment creation on code lines
-    ```yaml
-    safe-outputs:
-      create-pull-request-review-comment:
-        max: 3 # Optional: maximum number of review comments (default: 1)
-        side: "RIGHT" # Optional: side of diff ("LEFT" or "RIGHT", default: "RIGHT")
-        target: "*" # Optional: "triggering" (default), "*", or number
-        target-repo: "owner/repo" # Optional: cross-repository
-    ```
-    When using `safe-outputs.create-pull-request-review-comment`, the main job does **not** need `pull-requests: write` permission since review comment creation is handled by a separate job with appropriate permissions.
-  - `update-issue:` - Safe issue updates
-    ```yaml
-    safe-outputs:
-      update-issue:
-        status: true # Optional: allow updating issue status (open/closed)
-        target: "*" # Optional: target for updates (default: "triggering")
-        title: true # Optional: allow updating issue title
-        body: true # Optional: allow updating issue body
-        max: 3 # Optional: maximum number of issues to update (default: 1)
-        target-repo: "owner/repo" # Optional: cross-repository
-    ```
-    When using `safe-outputs.update-issue`, the main job does **not** need `issues: write` permission since issue updates are handled by a separate job with appropriate permissions.
-  - `update-pull-request:` - Update PR title or body
-    ```yaml
-    safe-outputs:
-      update-pull-request:
-        title: true # Optional: enable title updates (default: true)
-        body: true # Optional: enable body updates (default: true)
-        max: 1 # Optional: max updates (default: 1)
-        target: "*" # Optional: "triggering" (default), "*", or number
-        target-repo: "owner/repo" # Optional: cross-repository
-    ```
-    Operation types: `append` (default), `prepend`, `replace`.
-  - `close-pull-request:` - Safe pull request closing with filtering
-    ```yaml
-    safe-outputs:
-      close-pull-request:
-        required-labels: [test, automated] # Optional: only close PRs with these labels
-        required-title-prefix: "[bot]" # Optional: only close PRs with this title prefix
-        target: "triggering" # Optional: "triggering" (default), "*" (any PR), or explicit PR number
-        max: 10 # Optional: maximum number of PRs to close (default: 1)
-        target-repo: "owner/repo" # Optional: cross-repository
-    ```
-    When using `safe-outputs.close-pull-request`, the main job does **not** need `pull-requests: write` permission since PR closing is handled by a separate job with appropriate permissions.
-  - `add-labels:` - Safe label addition to issues or PRs
-    ```yaml
-    safe-outputs:
-      add-labels:
-        allowed: [bug, enhancement, documentation] # Optional: restrict to specific labels
-        max: 3 # Optional: maximum number of labels (default: 3)
-        target: "*" # Optional: "triggering" (default), "*" (any issue/PR), or number
-        target-repo: "owner/repo" # Optional: cross-repository
-    ```
-    When using `safe-outputs.add-labels`, the main job does **not** need `issues: write` or `pull-requests: write` permission since label addition is handled by a separate job with appropriate permissions.
-  - `add-reviewer:` - Add reviewers to pull requests
-    ```yaml
-    safe-outputs:
-      add-reviewer:
-        reviewers: [user1, copilot] # Optional: restrict to specific reviewers
-        max: 3 # Optional: max reviewers (default: 3)
-        target: "*" # Optional: "triggering" (default), "*", or number
-        target-repo: "owner/repo" # Optional: cross-repository
-    ```
-    Use `reviewers: copilot` to assign Copilot PR reviewer bot. Requires PAT as `COPILOT_GITHUB_TOKEN`.
-  - `assign-milestone:` - Assign issues to milestones
-    ```yaml
-    safe-outputs:
-      assign-milestone:
-        allowed: [v1.0, v2.0] # Optional: restrict to specific milestone titles
-        max: 1 # Optional: max assignments (default: 1)
-        target-repo: "owner/repo" # Optional: cross-repository
-    ```
-  - `link-sub-issue:` - Safe sub-issue linking
-    ```yaml
-    safe-outputs:
-      link-sub-issue:
-        parent-required-labels: [epic] # Optional: parent must have these labels
-        parent-title-prefix: "[Epic]" # Optional: parent must match this prefix
-        sub-required-labels: [task] # Optional: sub-issue must have these labels
-        sub-title-prefix: "[Task]" # Optional: sub-issue must match this prefix
-        max: 1 # Optional: maximum number of links (default: 1)
-        target-repo: "owner/repo" # Optional: cross-repository
-    ```
-    Links issues as sub-issues using GitHub's parent-child relationships. Agent output includes `parent_issue_number` and `sub_issue_number`. Use with `create-issue` temporary IDs or existing issue numbers.
-  - `update-project:` - Manage GitHub Projects boards
-    ```yaml
-    safe-outputs:
-      update-project:
-        max: 20 # Optional: max project operations (default: 10)
-        github-token: ${{ secrets.PROJECTS_PAT }} # Optional: token with projects:write
-    ```
-    Not supported for cross-repository operations.
-  - `push-to-pull-request-branch:` - Push changes to PR branch
-    ```yaml
-    safe-outputs:
-      push-to-pull-request-branch:
-        target: "*" # Optional: "triggering" (default), "*", or number
-        title-prefix: "[bot] " # Optional: require title prefix
-        labels: [automated] # Optional: require all labels
-        if-no-changes: "warn" # Optional: "warn" (default), "error", or "ignore"
-    ```
-    Not supported for cross-repository operations.
-  - `update-release:` - Update GitHub release descriptions
-    ```yaml
-    safe-outputs:
-      update-release:
-        max: 1 # Optional: max releases (default: 1, max: 10)
-        target-repo: "owner/repo" # Optional: cross-repository
-        github-token: ${{ secrets.CUSTOM_TOKEN }} # Optional: custom token
-    ```
-    Operation types: `replace`, `append`, `prepend`.
-  - `create-code-scanning-alert:` - Generate SARIF security advisories
-    ```yaml
-    safe-outputs:
-      create-code-scanning-alert:
-        max: 50 # Optional: max findings (default: unlimited)
-    ```
-    Severity levels: error, warning, info, note.
-  - `create-agent-task:` - Create GitHub Copilot agent tasks
-    ```yaml
-    safe-outputs:
-      create-agent-task:
-        base: main # Optional: base branch (defaults to current)
-        target-repo: "owner/repo" # Optional: cross-repository
-    ```
-    Requires PAT as `COPILOT_GITHUB_TOKEN`.
-  - `assign-to-agent:` - Assign Copilot agents to issues
-    ```yaml
-    safe-outputs:
-      assign-to-agent:
-        name: "copilot" # Optional: agent name
-        target-repo: "owner/repo" # Optional: cross-repository
-    ```
-    Requires PAT with elevated permissions as `GH_AW_AGENT_TOKEN`.
-  - `noop:` - Log completion message for transparency (auto-enabled)
-    ```yaml
-    safe-outputs:
-      noop:
-    ```
-    The noop safe-output provides a fallback mechanism ensuring workflows never complete silently. When enabled (automatically by default), agents can emit human-visible messages even when no other actions are required (e.g., "Analysis complete - no issues found"). This ensures every workflow run produces visible output.
-  - `missing-tool:` - Report missing tools or functionality (auto-enabled)
-    ```yaml
-    safe-outputs:
-      missing-tool:
-    ```
-    The missing-tool safe-output allows agents to report when they need tools or functionality not currently available. This is automatically enabled by default and helps track feature requests from agents.
-
-  **Global Safe Output Configuration:**
-  - `github-token:` - Custom GitHub token for all safe output jobs
-    ```yaml
-    safe-outputs:
-      create-issue:
-      add-comment:
-      github-token: ${{ secrets.CUSTOM_PAT }} # Use custom PAT instead of GITHUB_TOKEN
-    ```
-    Useful when you need additional permissions or want to perform actions across repositories.
+ - `create-issue:` - Safe GitHub issue creation (bugs, features)
+
+   ```yaml
+   safe-outputs:
+     create-issue:
+       title-prefix: "[ai] " # Optional: prefix for issue titles
+       labels: [automation, agentic] # Optional: labels to attach to issues
+       assignees: [user1, copilot] # Optional: assignees (use 'copilot' for bot)
+       max: 5 # Optional: maximum number of issues (default: 1)
+       target-repo: "owner/repo" # Optional: cross-repository
+   ```
+
+   When using `safe-outputs.create-issue`, the main job does **not** need `issues: write` permission since issue creation is handled by a separate job with appropriate permissions.
+
+   **Temporary IDs and Sub-Issues:**
+   When creating multiple issues, use `temporary_id` (format: `aw_` + 12 hex chars) to reference parent issues before creation. References like `#aw_abc123def456` in issue bodies are automatically replaced with actual issue numbers. Use the `parent` field to create sub-issue relationships:
+
+   ```json
+   {"type": "create_issue", "temporary_id": "aw_abc123def456", "title": "Parent", "body": "Parent issue"}
+   {"type": "create_issue", "parent": "aw_abc123def456", "title": "Sub-task", "body": "References #aw_abc123def456"}
+   ```
+
+ - `close-issue:` - Close issues with comment
+   ```yaml
+   safe-outputs:
+     close-issue:
+       target: "triggering" # Optional: "triggering" (default), "*", or number
+       required-labels: [automated] # Optional: only close with any of these labels
+       required-title-prefix: "[bot]" # Optional: only close matching prefix
+       max: 20 # Optional: max closures (default: 1)
+       target-repo: "owner/repo" # Optional: cross-repository
+   ```
+ - `create-discussion:` - Safe GitHub discussion creation (status, audits, reports, logs)
+
+   ```yaml
+   safe-outputs:
+     create-discussion:
+       title-prefix: "[ai] " # Optional: prefix for discussion titles
+       category: "General" # Optional: discussion category name, slug, or ID (defaults to first category if not specified)
+       max: 3 # Optional: maximum number of discussions (default: 1)
+       target-repo: "owner/repo" # Optional: cross-repository
+   ```
+
+   The `category` field is optional and can be specified by name (e.g., "General"), slug (e.g., "general"), or ID (e.g., "DIC_kwDOGFsHUM4BsUn3"). If not specified, discussions will be created in the first available category. Category resolution tries ID first, then name, then slug.
+
+   When using `safe-outputs.create-discussion`, the main job does **not** need `discussions: write` permission since discussion creation is handled by a separate job with appropriate permissions.
+
+ - `close-discussion:` - Close discussions with comment and resolution
+   ```yaml
+   safe-outputs:
+     close-discussion:
+       target: "triggering" # Optional: "triggering" (default), "*", or number
+       required-category: "Ideas" # Optional: only close in category
+       required-labels: [resolved] # Optional: only close with labels
+       required-title-prefix: "[ai]" # Optional: only close matching prefix
+       max: 1 # Optional: max closures (default: 1)
+       target-repo: "owner/repo" # Optional: cross-repository
+   ```
+   Resolution reasons: `RESOLVED`, `DUPLICATE`, `OUTDATED`, `ANSWERED`.
+ - `add-comment:` - Safe comment creation on issues/PRs/discussions
+   ```yaml
+   safe-outputs:
+     add-comment:
+       max: 3 # Optional: maximum number of comments (default: 1)
+       target: "*" # Optional: target for comments (default: "triggering")
+       discussion: true # Optional: target discussions
+       target-repo: "owner/repo" # Optional: cross-repository
+   ```
+   When using `safe-outputs.add-comment`, the main job does **not** need `issues: write` or `pull-requests: write` permissions since comment creation is handled by a separate job with appropriate permissions.
+ - `create-pull-request:` - Safe pull request creation with git patches
+   ```yaml
+   safe-outputs:
+     create-pull-request:
+       title-prefix: "[ai] " # Optional: prefix for PR titles
+       labels: [automation, ai-agent] # Optional: labels to attach to PRs
+       reviewers: [user1, copilot] # Optional: reviewers (use 'copilot' for bot)
+       draft: true # Optional: create as draft PR (defaults to true)
+       if-no-changes: "warn" # Optional: "warn" (default), "error", or "ignore"
+       target-repo: "owner/repo" # Optional: cross-repository
+   ```
+   When using `output.create-pull-request`, the main job does **not** need `contents: write` or `pull-requests: write` permissions since PR creation is handled by a separate job with appropriate permissions.
+ - `create-pull-request-review-comment:` - Safe PR review comment creation on code lines
+   ```yaml
+   safe-outputs:
+     create-pull-request-review-comment:
+       max: 3 # Optional: maximum number of review comments (default: 1)
+       side: "RIGHT" # Optional: side of diff ("LEFT" or "RIGHT", default: "RIGHT")
+       target: "*" # Optional: "triggering" (default), "*", or number
+       target-repo: "owner/repo" # Optional: cross-repository
+   ```
+   When using `safe-outputs.create-pull-request-review-comment`, the main job does **not** need `pull-requests: write` permission since review comment creation is handled by a separate job with appropriate permissions.
+ - `update-issue:` - Safe issue updates
+   ```yaml
+   safe-outputs:
+     update-issue:
+       status: true # Optional: allow updating issue status (open/closed)
+       target: "*" # Optional: target for updates (default: "triggering")
+       title: true # Optional: allow updating issue title
+       body: true # Optional: allow updating issue body
+       max: 3 # Optional: maximum number of issues to update (default: 1)
+       target-repo: "owner/repo" # Optional: cross-repository
+   ```
+   When using `safe-outputs.update-issue`, the main job does **not** need `issues: write` permission since issue updates are handled by a separate job with appropriate permissions.
+ - `update-pull-request:` - Update PR title or body
+   ```yaml
+   safe-outputs:
+     update-pull-request:
+       title: true # Optional: enable title updates (default: true)
+       body: true # Optional: enable body updates (default: true)
+       max: 1 # Optional: max updates (default: 1)
+       target: "*" # Optional: "triggering" (default), "*", or number
+       target-repo: "owner/repo" # Optional: cross-repository
+   ```
+   Operation types: `append` (default), `prepend`, `replace`.
+ - `close-pull-request:` - Safe pull request closing with filtering
+   ```yaml
+   safe-outputs:
+     close-pull-request:
+       required-labels: [test, automated] # Optional: only close PRs with these labels
+       required-title-prefix: "[bot]" # Optional: only close PRs with this title prefix
+       target: "triggering" # Optional: "triggering" (default), "*" (any PR), or explicit PR number
+       max: 10 # Optional: maximum number of PRs to close (default: 1)
+       target-repo: "owner/repo" # Optional: cross-repository
+   ```
+   When using `safe-outputs.close-pull-request`, the main job does **not** need `pull-requests: write` permission since PR closing is handled by a separate job with appropriate permissions.
+ - `add-labels:` - Safe label addition to issues or PRs
+   ```yaml
+   safe-outputs:
+     add-labels:
+       allowed: [bug, enhancement, documentation] # Optional: restrict to specific labels
+       max: 3 # Optional: maximum number of labels (default: 3)
+       target: "*" # Optional: "triggering" (default), "*" (any issue/PR), or number
+       target-repo: "owner/repo" # Optional: cross-repository
+   ```
+   When using `safe-outputs.add-labels`, the main job does **not** need `issues: write` or `pull-requests: write` permission since label addition is handled by a separate job with appropriate permissions.
+ - `add-reviewer:` - Add reviewers to pull requests
+   ```yaml
+   safe-outputs:
+     add-reviewer:
+       reviewers: [user1, copilot] # Optional: restrict to specific reviewers
+       max: 3 # Optional: max reviewers (default: 3)
+       target: "*" # Optional: "triggering" (default), "*", or number
+       target-repo: "owner/repo" # Optional: cross-repository
+   ```
+   Use `reviewers: copilot` to assign Copilot PR reviewer bot. Requires PAT as `COPILOT_GITHUB_TOKEN`.
+ - `assign-milestone:` - Assign issues to milestones
+   ```yaml
+   safe-outputs:
+     assign-milestone:
+       allowed: [v1.0, v2.0] # Optional: restrict to specific milestone titles
+       max: 1 # Optional: max assignments (default: 1)
+       target-repo: "owner/repo" # Optional: cross-repository
+   ```
+ - `link-sub-issue:` - Safe sub-issue linking
+   ```yaml
+   safe-outputs:
+     link-sub-issue:
+       parent-required-labels: [epic] # Optional: parent must have these labels
+       parent-title-prefix: "[Epic]" # Optional: parent must match this prefix
+       sub-required-labels: [task] # Optional: sub-issue must have these labels
+       sub-title-prefix: "[Task]" # Optional: sub-issue must match this prefix
+       max: 1 # Optional: maximum number of links (default: 1)
+       target-repo: "owner/repo" # Optional: cross-repository
+   ```
+   Links issues as sub-issues using GitHub's parent-child relationships. Agent output includes `parent_issue_number` and `sub_issue_number`. Use with `create-issue` temporary IDs or existing issue numbers.
+ - `update-project:` - Manage GitHub Projects boards
+   ```yaml
+   safe-outputs:
+     update-project:
+       max: 20 # Optional: max project operations (default: 10)
+       github-token: ${{ secrets.PROJECTS_PAT }} # Optional: token with projects:write
+   ```
+   Not supported for cross-repository operations.
+ - `push-to-pull-request-branch:` - Push changes to PR branch
+   ```yaml
+   safe-outputs:
+     push-to-pull-request-branch:
+       target: "*" # Optional: "triggering" (default), "*", or number
+       title-prefix: "[bot] " # Optional: require title prefix
+       labels: [automated] # Optional: require all labels
+       if-no-changes: "warn" # Optional: "warn" (default), "error", or "ignore"
+   ```
+   Not supported for cross-repository operations.
+ - `update-release:` - Update GitHub release descriptions
+   ```yaml
+   safe-outputs:
+     update-release:
+       max: 1 # Optional: max releases (default: 1, max: 10)
+       target-repo: "owner/repo" # Optional: cross-repository
+       github-token: ${{ secrets.CUSTOM_TOKEN }} # Optional: custom token
+   ```
+   Operation types: `replace`, `append`, `prepend`.
+ - `create-code-scanning-alert:` - Generate SARIF security advisories
+   ```yaml
+   safe-outputs:
+     create-code-scanning-alert:
+       max: 50 # Optional: max findings (default: unlimited)
+   ```
+   Severity levels: error, warning, info, note.
+ - `create-agent-task:` - Create GitHub Copilot agent tasks
+   ```yaml
+   safe-outputs:
+     create-agent-task:
+       base: main # Optional: base branch (defaults to current)
+       target-repo: "owner/repo" # Optional: cross-repository
+   ```
+   Requires PAT as `COPILOT_GITHUB_TOKEN`.
+ - `assign-to-agent:` - Assign Copilot agents to issues
+   ```yaml
+   safe-outputs:
+     assign-to-agent:
+       name: "copilot" # Optional: agent name
+       target-repo: "owner/repo" # Optional: cross-repository
+   ```
+   Requires PAT with elevated permissions as `GH_AW_AGENT_TOKEN`.
+ - `noop:` - Log completion message for transparency (auto-enabled)
+   ```yaml
+   safe-outputs:
+     noop:
+   ```
+   The noop safe-output provides a fallback mechanism ensuring workflows never complete silently. When enabled (automatically by default), agents can emit human-visible messages even when no other actions are required (e.g., "Analysis complete - no issues found"). This ensures every workflow run produces visible output.
+ - `missing-tool:` - Report missing tools or functionality (auto-enabled)
+   ```yaml
+   safe-outputs:
+     missing-tool:
+   ```
+   The missing-tool safe-output allows agents to report when they need tools or functionality not currently available. This is automatically enabled by default and helps track feature requests from agents.
+
+ **Global Safe Output Configuration:**
+ - `github-token:` - Custom GitHub token for all safe output jobs
+   ```yaml
+   safe-outputs:
+     create-issue:
+     add-comment:
+     github-token: ${{ secrets.CUSTOM_PAT }} # Use custom PAT instead of GITHUB_TOKEN
+   ```
+   Useful when you need additional permissions or want to perform actions across repositories.
 
 - **`command:`** - Command trigger configuration for /mention workflows
 - **`cache:`** - Cache configuration for workflow dependencies (object or array)
@@ -527,11 +529,11 @@ The `cache:` field supports the same syntax as the GitHub Actions `actions/cache
 
 ```yaml
 cache:
-  key: node-modules-${{ hashFiles('package-lock.json') }}
-  path: node_modules
-  restore-keys: |
-    node-modules-
-```
+ key: node-modules-${{ hashFiles('package-lock.json') }}
+ path: node_modules
+ restore-keys: |
+   node-modules-
+````
 
 **Multiple Caches:**
 
@@ -908,12 +910,12 @@ network: defaults
 # Use ecosystem identifiers for common development tools
 network:
   allowed:
-    - defaults         # Basic infrastructure
-    - python          # Python/PyPI ecosystem
-    - node            # Node.js/NPM ecosystem
-    - containers      # Container registries
+    - defaults # Basic infrastructure
+    - python # Python/PyPI ecosystem
+    - node # Node.js/NPM ecosystem
+    - containers # Container registries
     - "api.custom.com" # Custom domain
-  firewall: true      # Enable AWF (Copilot engine only)
+  firewall: true # Enable AWF (Copilot engine only)
 
 # Or allow specific domains only
 network:
diff --git a/.github/fuzzing/fuzz-mdx-sanitizer.ts b/.github/fuzzing/fuzz-mdx-sanitizer.ts
index 37de67f..21d53e0 100644
--- a/.github/fuzzing/fuzz-mdx-sanitizer.ts
+++ b/.github/fuzzing/fuzz-mdx-sanitizer.ts
@@ -14,202 +14,208 @@
  * Exit 0 = all invariants held; Exit 1 = violation found.
  */
 
-import { sanitizeHtmlForMdx } from '../../src/lib/sanitizeHtml'
+import { sanitizeHtmlForMdx } from "../../src/lib/sanitizeHtml";
 
 // ---------------------------------------------------------------------------
 // CLI arguments
 // ---------------------------------------------------------------------------
 const args: Record<string, string | boolean> = Object.fromEntries(
-  process.argv.slice(2).map((a) => {
-    const [k, v] = a.replace(/^--/, '').split('=')
-    return [k, v ?? true]
-  }),
-)
-const ITERATIONS = parseInt(String(args['iterations'] ?? '20000'), 10)
-const SEED = parseInt(String(args['seed'] ?? Date.now()), 10)
+  process.argv.slice(2).map(a => {
+    const [k, v] = a.replace(/^--/, "").split("=");
+    return [k, v ?? true];
+  })
+);
+const ITERATIONS = parseInt(String(args["iterations"] ?? "20000"), 10);
+const SEED = parseInt(String(args["seed"] ?? Date.now()), 10);
 
 // ---------------------------------------------------------------------------
 // Seedable PRNG (xorshift32) for reproducible runs
 // ---------------------------------------------------------------------------
-let state = (SEED >>> 0) || 0xcafebabe
+let state = SEED >>> 0 || 0xcafebabe;
 function rand(): number {
-  state ^= state << 13
-  state ^= state >> 17
-  state ^= state << 5
-  return (state >>> 0) / 0xffffffff
+  state ^= state << 13;
+  state ^= state >> 17;
+  state ^= state << 5;
+  return (state >>> 0) / 0xffffffff;
 }
 function randInt(lo: number, hi: number): number {
-  return Math.floor(rand() * (hi - lo + 1)) + lo
+  return Math.floor(rand() * (hi - lo + 1)) + lo;
 }
 function randChoice<T>(arr: T[]): T {
-  return arr[randInt(0, arr.length - 1)]
+  return arr[randInt(0, arr.length - 1)];
 }
 
 // ---------------------------------------------------------------------------
 // Seed corpus — real-world XSS and MDX edge cases
 // ---------------------------------------------------------------------------
 const SEEDS: string[] = [
-  '<p>Hello</p><script>alert(1)</script><p>World</p>',
+  "<p>Hello</p><script>alert(1)</script><p>World</p>",
   '<script type="text/javascript" src="evil.js"></script>',
-  '<script>x</script >',
+  "<script>x</script >",
   '<script>alert(1)</script foo="bar">',
-  '<script>x</script\n>',
-  '<scr<script>y</script>ipt>alert(1)</script>',
-  '<scr<scr<script></script>ipt></script>ipt>evil</script>',
-  '<script>a()</script>text<script>b()</script>',
-  '<!-- <script>alert(1)</script> -->',
-  '<!--<script>-->alert(1)<!--</script>-->',
-  '{# jinja comment #}',
-  '<style>body{display:none}</style><p>text</p>',
-  '<sty<style>x</style>le>.evil{}</style>',
-  'he\x00llo',
-  '\x01\x02\x03\x04\x05\x06\x07',
-  'test\x7Fvalue',
+  "<script>x</script\n>",
+  "<scr<script>y</script>ipt>alert(1)</script>",
+  "<scr<scr<script></script>ipt></script>ipt>evil</script>",
+  "<script>a()</script>text<script>b()</script>",
+  "<!-- <script>alert(1)</script> -->",
+  "<!--<script>-->alert(1)<!--</script>-->",
+  "{# jinja comment #}",
+  "<style>body{display:none}</style><p>text</p>",
+  "<sty<style>x</style>le>.evil{}</style>",
+  "he\x00llo",
+  "\x01\x02\x03\x04\x05\x06\x07",
+  "test\x7Fvalue",
   '<img src="x" onerror="alert(1)" />',
   '<a href="javascript:void(0)" onclick="evil()">link</a>',
   '<div onmouseover="evil()">hover</div>',
   '<iframe src="evil.html"></iframe>',
   '<i<iframe>frame src="evil.html"></iframe>',
   '<meta http-equiv="refresh" content="0;url=evil.html">',
-  '<!DOCTYPE html><html><body>',
-  '<![CDATA[<script>alert(1)</script>]]>',
+  "<!DOCTYPE html><html><body>",
+  "<![CDATA[<script>alert(1)</script>]]>",
   '<?xml version="1.0"?><script>alert(1)</script>',
   '<p class="foo" style="color:red" align="left">text</p>',
-  '<script>'.repeat(50) + 'evil()' + '</script>'.repeat(50),
-  '<scr' + 'ipt>nested</scr' + 'ipt>',
-  '',
-  'plain text with no HTML',
-]
+  "<script>".repeat(50) + "evil()" + "</script>".repeat(50),
+  "<scr" + "ipt>nested</scr" + "ipt>",
+  "",
+  "plain text with no HTML",
+];
 
 // ---------------------------------------------------------------------------
 // Injections for mutation
 // ---------------------------------------------------------------------------
 const INJECTIONS: string[] = [
-  '<script>alert(1)</script>',
-  '<SCRIPT>alert(1)</SCRIPT>',
-  '<ScRiPt>evil()</sCrIpT>',
-  'onerror=alert(1)',
+  "<script>alert(1)</script>",
+  "<SCRIPT>alert(1)</SCRIPT>",
+  "<ScRiPt>evil()</sCrIpT>",
+  "onerror=alert(1)",
   ' onclick="evil()"',
-  '<style>*{visibility:hidden}</style>',
-  '<!--',
-  '-->',
-  '\x00',
-  '\x7F',
-  '${7*7}',
-  '{{7*7}}',
-  '{# test #}',
+  "<style>*{visibility:hidden}</style>",
+  "<!--",
+  "-->",
+  "\x00",
+  "\x7F",
+  "${7*7}",
+  "{{7*7}}",
+  "{# test #}",
   '<iframe src="x">',
-]
+];
 
 // ---------------------------------------------------------------------------
 // Mutation operators
 // ---------------------------------------------------------------------------
 function mutate(input: string): string {
-  const op = randInt(0, 5)
+  const op = randInt(0, 5);
   switch (op) {
     case 0: {
-      const pos = randInt(0, input.length)
-      const chunk = randChoice(INJECTIONS)
-      return input.slice(0, pos) + chunk + input.slice(pos)
+      const pos = randInt(0, input.length);
+      const chunk = randChoice(INJECTIONS);
+      return input.slice(0, pos) + chunk + input.slice(pos);
     }
     case 1: {
-      if (input.length < 2) return input
-      const lo = randInt(0, input.length - 1)
-      const hi = randInt(lo, Math.min(lo + 20, input.length))
-      return input.slice(0, lo) + input.slice(hi)
+      if (input.length < 2) return input;
+      const lo = randInt(0, input.length - 1);
+      const hi = randInt(lo, Math.min(lo + 20, input.length));
+      return input.slice(0, lo) + input.slice(hi);
     }
     case 2: {
-      const lo = randInt(0, input.length)
-      const hi = randInt(lo, Math.min(lo + 15, input.length))
-      return input + input.slice(lo, hi)
+      const lo = randInt(0, input.length);
+      const hi = randInt(lo, Math.min(lo + 15, input.length));
+      return input + input.slice(lo, hi);
     }
     case 3: {
-      if (input.length === 0) return input
-      const i = randInt(0, input.length - 1)
-      const arr = [...input]
-      arr[i] = String.fromCharCode(randInt(0, 127))
-      return arr.join('')
+      if (input.length === 0) return input;
+      const i = randInt(0, input.length - 1);
+      const arr = [...input];
+      arr[i] = String.fromCharCode(randInt(0, 127));
+      return arr.join("");
     }
     case 4: {
-      return input.replace(/[a-zA-Z]/g, (c) =>
-        rand() < 0.05 ? (c === c.toUpperCase() ? c.toLowerCase() : c.toUpperCase()) : c,
-      )
+      return input.replace(/[a-zA-Z]/g, c =>
+        rand() < 0.05
+          ? c === c.toUpperCase()
+            ? c.toLowerCase()
+            : c.toUpperCase()
+          : c
+      );
     }
     default:
-      return input + randChoice(INJECTIONS)
+      return input + randChoice(INJECTIONS);
   }
 }
 
 // ---------------------------------------------------------------------------
 // Invariant checks
 // ---------------------------------------------------------------------------
-const SCRIPT_RE = /<script[\s>]/i
-const STYLE_RE = /<style[\s>]/i
-const HANDLER_RE = /\son\w+\s*=/i
+const SCRIPT_RE = /<script[\s>]/i;
+const STYLE_RE = /<style[\s>]/i;
+const HANDLER_RE = /\son\w+\s*=/i;
 
 function checkInvariants(input: string, output: string): string | null {
   if (SCRIPT_RE.test(output))
-    return `<script> tag survived sanitization\ninput: ${JSON.stringify(input.slice(0, 300))}`
+    return `<script> tag survived sanitization\ninput: ${JSON.stringify(input.slice(0, 300))}`;
   if (STYLE_RE.test(output))
-    return `<style> tag survived sanitization\ninput: ${JSON.stringify(input.slice(0, 300))}`
+    return `<style> tag survived sanitization\ninput: ${JSON.stringify(input.slice(0, 300))}`;
   if (HANDLER_RE.test(output))
-    return `event handler attribute survived\ninput: ${JSON.stringify(input.slice(0, 300))}`
-  return null
+    return `event handler attribute survived\ninput: ${JSON.stringify(input.slice(0, 300))}`;
+  return null;
 }
 
 // ---------------------------------------------------------------------------
 // Main loop
 // ---------------------------------------------------------------------------
-console.log(`fuzz-mdx-sanitizer  seed=${SEED}  iterations=${ITERATIONS}`)
+console.log(`fuzz-mdx-sanitizer  seed=${SEED}  iterations=${ITERATIONS}`);
 
-const corpus: string[] = [...SEEDS]
-let failures = 0
+const corpus: string[] = [...SEEDS];
+let failures = 0;
 
 for (let i = 0; i < ITERATIONS; i++) {
-  const base = randChoice(corpus)
-  const input = mutate(base)
+  const base = randChoice(corpus);
+  const input = mutate(base);
 
-  let output: string
-  const t0 = Date.now()
+  let output: string;
+  const t0 = Date.now();
   try {
-    output = sanitizeHtmlForMdx(input)
+    output = sanitizeHtmlForMdx(input);
   } catch (err) {
-    console.error(`[CRASH] i=${i} ${(err as Error).message}`)
-    console.error(`input: ${JSON.stringify(input.slice(0, 300))}`)
-    failures++
-    if (failures >= 3) break
-    continue
+    console.error(`[CRASH] i=${i} ${(err as Error).message}`);
+    console.error(`input: ${JSON.stringify(input.slice(0, 300))}`);
+    failures++;
+    if (failures >= 3) break;
+    continue;
   }
-  const elapsed = Date.now() - t0
+  const elapsed = Date.now() - t0;
   if (elapsed > 200) {
     console.error(
-      `[SLOW] i=${i} elapsed=${elapsed}ms for input of length ${input.length}`,
-    )
+      `[SLOW] i=${i} elapsed=${elapsed}ms for input of length ${input.length}`
+    );
     // Not counted as a hard failure — log and continue
   }
 
-  const violation = checkInvariants(input, output)
+  const violation = checkInvariants(input, output);
   if (violation) {
-    console.error(`[FAIL] i=${i} ${violation}`)
-    failures++
-    if (failures >= 3) break
-    continue
+    console.error(`[FAIL] i=${i} ${violation}`);
+    failures++;
+    if (failures >= 3) break;
+    continue;
   }
 
   // Light coverage guidance: occasionally add mutated input to corpus
   if (rand() < 0.02 && corpus.length < 300) {
-    corpus.push(input)
+    corpus.push(input);
   }
 
   if (i > 0 && i % 5000 === 0) {
-    process.stdout.write(`  ${i}/${ITERATIONS} ok  corpus=${corpus.length}\n`)
+    process.stdout.write(`  ${i}/${ITERATIONS} ok  corpus=${corpus.length}\n`);
   }
 }
 
 if (failures > 0) {
-  console.error(`\nFAILED: ${failures} violation(s) found`)
-  process.exit(1)
+  console.error(`\nFAILED: ${failures} violation(s) found`);
+  process.exit(1);
 }
 
-console.log(`PASSED: all ${ITERATIONS} iterations clean  corpus=${corpus.length}`)
-process.exit(0)
+console.log(
+  `PASSED: all ${ITERATIONS} iterations clean  corpus=${corpus.length}`
+);
+process.exit(0);
diff --git a/.github/workflows/markdownlint-cli2.yml b/.github/workflows/markdownlint-cli2.yml
index 05d1adf..6f92f39 100644
--- a/.github/workflows/markdownlint-cli2.yml
+++ b/.github/workflows/markdownlint-cli2.yml
@@ -9,7 +9,7 @@ on:
       - "docs/**/*.md"
       - "docs/**/*.mdx"
 
-permissions: read-all  # default read; writes scoped to job below
+permissions: read-all # default read; writes scoped to job below
 
 concurrency:
   group: mdlint-${{ github.workflow }}-${{ github.ref }}
diff --git a/.github/workflows/meeting-recordings-refresh.yml b/.github/workflows/meeting-recordings-refresh.yml
index 29b4a54..6c71cc3 100644
--- a/.github/workflows/meeting-recordings-refresh.yml
+++ b/.github/workflows/meeting-recordings-refresh.yml
@@ -3,7 +3,7 @@ name: Refresh meeting recordings
 on:
   workflow_dispatch:
   schedule:
-    - cron: '17 12 * * *'
+    - cron: "17 12 * * *"
 
 permissions:
   contents: read
@@ -24,14 +24,14 @@ jobs:
           ref: main
       - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
-          node-version: '22'
+          node-version: "22"
           cache: npm
       - run: npm ci --ignore-scripts
       - run: npx tsx scripts/update-meeting-recordings.ts
       - name: Commit recording feed snapshot
         uses: stefanzweifel/git-auto-commit-action@4a55954c782fc1ea30b9056cd3e7a2b40ca8887d # v7.2.0
         with:
-          commit_message: 'docs: refresh community meeting recordings'
+          commit_message: "docs: refresh community meeting recordings"
           file_pattern: data/meeting-recordings.json
       - name: Trigger Netlify rebuild
         if: env.NETLIFY_BUILD_HOOK_URL != ''
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 4d27f9f..a1815b1 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -7,7 +7,7 @@ on:
     - cron: "23 5 * * 1"
   workflow_dispatch:
 
-permissions: read-all  # default read; writes scoped to job below
+permissions: read-all # default read; writes scoped to job below
 
 concurrency:
   group: scorecard-${{ github.workflow }}-${{ github.ref }}
diff --git a/.github/workflows/typecheck.yml b/.github/workflows/typecheck.yml
index edc458d..c8789ad 100644
--- a/.github/workflows/typecheck.yml
+++ b/.github/workflows/typecheck.yml
@@ -28,7 +28,7 @@ on:
       - "eslint.config.*"
       - "next.config.*"
 
-permissions: read-all  # default read; writes scoped to job below
+permissions: read-all # default read; writes scoped to job below
 
 concurrency:
   group: typecheck-${{ github.workflow }}-${{ github.ref }}
diff --git a/.github/workflows/vitest.yml b/.github/workflows/vitest.yml
index 6b29dfb..71e5c69 100644
--- a/.github/workflows/vitest.yml
+++ b/.github/workflows/vitest.yml
@@ -24,7 +24,7 @@ on:
       - "vitest.config.ts"
       - "next.config.*"
 
-permissions: read-all  # default read; writes scoped to job below
+permissions: read-all # default read; writes scoped to job below
 
 concurrency:
   group: vitest-${{ github.workflow }}-${{ github.ref }}
diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
index d3bd705..b9d3ad3 100644
--- a/CONTRIBUTING.md
+++ b/CONTRIBUTING.md
@@ -54,4 +54,3 @@ actual security-sensitive surface: the Netlify serverless function in
 `netlify.toml`), and dependency bumps (`npm audit`, Dependabot PRs). This repo
 has no Dockerfiles or Kubernetes manifests, so those checklist items do not
 apply here — leave them unchecked as the template instructs.
-
diff --git a/eslint.config.mjs b/eslint.config.mjs
index 5b07111..5054b05 100644
--- a/eslint.config.mjs
+++ b/eslint.config.mjs
@@ -40,7 +40,7 @@ export default [
         FormData: "readonly",
         DataView: "readonly",
         ArrayBuffer: "readonly",
-        
+
         // Node.js globals
         Buffer: "readonly",
         __dirname: "readonly",
@@ -49,7 +49,7 @@ export default [
         clearImmediate: "readonly",
         setInterval: "readonly",
         clearInterval: "readonly",
-        
+
         // React/JSX
         React: "readonly",
         JSX: "readonly",
@@ -81,7 +81,7 @@ export default [
       "no-unused-vars": "off",
       "no-undef": "off",
       "no-control-regex": "off",
-      
+
       // TypeScript ESLint rules
       "@typescript-eslint/no-unused-vars": [
         "warn",
@@ -89,20 +89,20 @@ export default [
       ],
       "@typescript-eslint/explicit-module-boundary-types": "off",
       "@typescript-eslint/no-explicit-any": "warn",
-      
+
       // Next.js rules
       "@next/next/no-html-link-for-pages": "warn",
       "@next/next/no-img-element": "warn",
       "@next/next/no-duplicate-head": "warn",
       "@next/next/google-font-display": "warn",
       "@next/next/google-font-preconnect": "warn",
-      
+
       // React rules
       "react/react-in-jsx-scope": "off",
       "react/prop-types": "off",
       "react/no-unescaped-entities": "warn",
       "react/display-name": "off",
-      
+
       // React Hooks rules
       "react-hooks/rules-of-hooks": "error",
       "react-hooks/exhaustive-deps": "warn",
@@ -110,10 +110,10 @@ export default [
       "react-hooks/purity": "off",
       "react-hooks/set-state-in-effect": "off",
       "react-hooks/static-components": "off",
-      
+
       // Import rules
       "import/no-unresolved": "off",
-      
+
       // JSX A11y rules
       "jsx-a11y/alt-text": "warn",
       "jsx-a11y/click-events-have-key-events": "warn",
diff --git a/mdx-components.js b/mdx-components.js
index 66e720c..4dd6b36 100644
--- a/mdx-components.js
+++ b/mdx-components.js
@@ -1,13 +1,29 @@
-import { DocsLayout } from './src/components/docs/DocsLayout';
+import { DocsLayout } from "./src/components/docs/DocsLayout";
 
 // Custom MDX components without nextra-theme-docs
 export function useMDXComponents(components) {
   return {
     // Wrapper component that wraps the entire MDX content with DocsLayout
     // Sidebar is now in the Next.js layout (persists across navigations)
-    wrapper: ({ children, toc, metadata, sourceCode, pageMap: _pageMap, filePath, projectId, sourceUrl, ...props }) => {
+    wrapper: ({
+      children,
+      toc,
+      metadata,
+      sourceCode,
+      pageMap: _pageMap,
+      filePath,
+      projectId,
+      sourceUrl,
+      ...props
+    }) => {
       return (
-        <DocsLayout toc={toc} metadata={metadata} filePath={filePath} projectId={projectId} sourceUrl={sourceUrl}>
+        <DocsLayout
+          toc={toc}
+          metadata={metadata}
+          filePath={filePath}
+          projectId={projectId}
+          sourceUrl={sourceUrl}
+        >
           {children}
         </DocsLayout>
       );
@@ -20,4 +36,3 @@ export function useMDXComponents(components) {
     ...components,
   };
 }
-
diff --git a/netlify/functions/nps.mts b/netlify/functions/nps.mts
index f457fa9..c40d6f3 100644
--- a/netlify/functions/nps.mts
+++ b/netlify/functions/nps.mts
@@ -8,28 +8,40 @@
  * path.
  */
 
-import { getStore } from '@netlify/blobs'
-import { HUB_SECRET_HASH_ENV, STORE_NAME, handleRelayRequest, type RelayStore } from '../nps-relay/relay'
+import { getStore } from "@netlify/blobs";
+import {
+  HUB_SECRET_HASH_ENV,
+  STORE_NAME,
+  handleRelayRequest,
+  type RelayStore,
+} from "../nps-relay/relay";
 
 /** The part of the Netlify function context the relay reads. */
 interface RelayContext {
-  ip?: string
+  ip?: string;
 }
 
-export default async (req: Request, context: RelayContext): Promise<Response> => {
-  const store = getStore({ name: STORE_NAME, consistency: 'strong' }) as unknown as RelayStore
+export default async (
+  req: Request,
+  context: RelayContext
+): Promise<Response> => {
+  const store = getStore({
+    name: STORE_NAME,
+    consistency: "strong",
+  }) as unknown as RelayStore;
   return handleRelayRequest(req, {
     store,
     env: {
       hubSecretHash: process.env[HUB_SECRET_HASH_ENV],
     },
-    clientIp: context.ip || req.headers.get('x-nf-client-connection-ip') || undefined,
-  })
-}
+    clientIp:
+      context.ip || req.headers.get("x-nf-client-connection-ip") || undefined,
+  });
+};
 
 // Literal paths: Netlify reads this config statically. They must match
 // RELAY_BASE_PATH, REGISTER_PATH, PENDING_PATH and ACK_PATH in
 // ../nps-relay/relay.ts (a test there checks it).
 export const config = {
-  path: ['/api/nps', '/api/nps/register', '/api/nps/pending', '/api/nps/ack'],
-}
+  path: ["/api/nps", "/api/nps/register", "/api/nps/pending", "/api/nps/ack"],
+};
diff --git a/netlify/nps-relay/relay.test.ts b/netlify/nps-relay/relay.test.ts
index ccf45f0..1fb965f 100644
--- a/netlify/nps-relay/relay.test.ts
+++ b/netlify/nps-relay/relay.test.ts
@@ -1,8 +1,14 @@
-import { createHash, generateKeyPairSync, randomBytes, sign, type KeyObject } from 'node:crypto'
-import { readFileSync } from 'node:fs'
-import path from 'node:path'
-import { fileURLToPath } from 'node:url'
-import { beforeEach, describe, expect, it } from 'vitest'
+import {
+  createHash,
+  generateKeyPairSync,
+  randomBytes,
+  sign,
+  type KeyObject,
+} from "node:crypto";
+import { readFileSync } from "node:fs";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+import { beforeEach, describe, expect, it } from "vitest";
 import {
   ACK_PATH,
   CAS_MAX_ATTEMPTS,
@@ -42,17 +48,17 @@ import {
   type RelayEntry,
   type RelayStore,
   type WriteOutcome,
-} from './relay'
+} from "./relay";
 
-const HERE = path.dirname(fileURLToPath(import.meta.url))
-const ORIGIN = 'https://relay.test'
-const HUB_SECRET = 'hub-pull-secret-for-tests'
-const T0 = Date.UTC(2026, 8, 29, 12, 0, 0)
-const MS_PER_SECOND = 1000
-const NONCE_BYTES = 16
+const HERE = path.dirname(fileURLToPath(import.meta.url));
+const ORIGIN = "https://relay.test";
+const HUB_SECRET = "hub-pull-secret-for-tests";
+const T0 = Date.UTC(2026, 8, 29, 12, 0, 0);
+const MS_PER_SECOND = 1000;
+const NONCE_BYTES = 16;
 
 function sha256(value: string): string {
-  return createHash('sha256').update(value, 'utf8').digest('hex')
+  return createHash("sha256").update(value, "utf8").digest("hex");
 }
 
 /**
@@ -62,296 +68,450 @@ function sha256(value: string): string {
  * instances would.
  */
 class MemoryStore implements RelayStore {
-  data = new Map<string, unknown>()
-  etags = new Map<string, string>()
-  writes = 0
-  private version = 0
+  data = new Map<string, unknown>();
+  etags = new Map<string, string>();
+  writes = 0;
+  private version = 0;
 
   async get(key: string): Promise<unknown> {
-    await new Promise((r) => setImmediate(r))
-    return this.data.has(key) ? JSON.parse(JSON.stringify(this.data.get(key))) : null
+    await new Promise(r => setImmediate(r));
+    return this.data.has(key)
+      ? JSON.parse(JSON.stringify(this.data.get(key)))
+      : null;
   }
 
-  async getWithMetadata(key: string): Promise<{ data: unknown; etag?: string } | null> {
-    const data = await this.get(key)
-    if (data === null) return null
-    return { data, etag: this.etags.get(key) }
+  async getWithMetadata(
+    key: string
+  ): Promise<{ data: unknown; etag?: string } | null> {
+    const data = await this.get(key);
+    if (data === null) return null;
+    return { data, etag: this.etags.get(key) };
   }
 
-  async setJSON(key: string, value: unknown, options?: ConditionalSetOptions): Promise<WriteOutcome> {
-    await new Promise((r) => setImmediate(r))
-    if (options?.onlyIfNew && this.data.has(key)) return { modified: false }
-    if (options?.onlyIfMatch !== undefined && this.etags.get(key) !== options.onlyIfMatch) return { modified: false }
-    this.writes++
-    const etag = `"v${++this.version}"`
-    this.data.set(key, JSON.parse(JSON.stringify(value)))
-    this.etags.set(key, etag)
-    return { modified: true, etag }
+  async setJSON(
+    key: string,
+    value: unknown,
+    options?: ConditionalSetOptions
+  ): Promise<WriteOutcome> {
+    await new Promise(r => setImmediate(r));
+    if (options?.onlyIfNew && this.data.has(key)) return { modified: false };
+    if (
+      options?.onlyIfMatch !== undefined &&
+      this.etags.get(key) !== options.onlyIfMatch
+    )
+      return { modified: false };
+    this.writes++;
+    const etag = `"v${++this.version}"`;
+    this.data.set(key, JSON.parse(JSON.stringify(value)));
+    this.etags.set(key, etag);
+    return { modified: true, etag };
   }
 
   async delete(key: string): Promise<void> {
-    this.data.delete(key)
-    this.etags.delete(key)
+    this.data.delete(key);
+    this.etags.delete(key);
   }
 
-  async list({ prefix }: { prefix: string }): Promise<{ blobs: Array<{ key: string }> }> {
-    return { blobs: [...this.data.keys()].filter((k) => k.startsWith(prefix)).map((key) => ({ key })) }
+  async list({
+    prefix,
+  }: {
+    prefix: string;
+  }): Promise<{ blobs: Array<{ key: string }> }> {
+    return {
+      blobs: [...this.data.keys()]
+        .filter(k => k.startsWith(prefix))
+        .map(key => ({ key })),
+    };
   }
 
   entries(): RelayEntry[] {
     return [...this.data.entries()]
       .filter(([k]) => k.startsWith(ENTRY_PREFIX))
       .sort(([a], [b]) => a.localeCompare(b))
-      .map(([, v]) => v as RelayEntry)
+      .map(([, v]) => v as RelayEntry);
   }
 }
 
 /** A test hive: an install id plus an Ed25519 keypair. */
 interface Hive {
-  installId: string
-  publicKey: string
-  privateKey: KeyObject
+  installId: string;
+  publicKey: string;
+  privateKey: KeyObject;
 }
 
-let uuidCounter = 0
+let uuidCounter = 0;
 function newHive(): Hive {
-  const { publicKey, privateKey } = generateKeyPairSync('ed25519')
-  const der = publicKey.export({ format: 'der', type: 'spki' })
-  uuidCounter++
+  const { publicKey, privateKey } = generateKeyPairSync("ed25519");
+  const der = publicKey.export({ format: "der", type: "spki" });
+  uuidCounter++;
   return {
-    installId: `00000000-0000-4000-8000-${String(uuidCounter).padStart(12, '0')}`,
+    installId: `00000000-0000-4000-8000-${String(uuidCounter).padStart(12, "0")}`,
     // The raw 32-byte key is the tail of the SPKI DER encoding.
-    publicKey: der.subarray(der.length - 32).toString('base64'),
+    publicKey: der.subarray(der.length - 32).toString("base64"),
     privateKey,
-  }
+  };
 }
 
-let store: MemoryStore
-let now: number
-let hive: Hive
+let store: MemoryStore;
+let now: number;
+let hive: Hive;
 
 function deps(overrides: Partial<RelayDeps> = {}): RelayDeps {
   return {
     store,
     env: { hubSecretHash: sha256(HUB_SECRET) },
-    clientIp: '203.0.113.7',
+    clientIp: "203.0.113.7",
     now: () => now,
     ...overrides,
-  }
+  };
 }
 
 interface SignOptions {
-  signer?: Hive
+  signer?: Hive;
   /** Install id placed in the header (defaults to the signer's). */
-  headerInstallId?: string
-  timestampMs?: number
-  nonce?: string
+  headerInstallId?: string;
+  timestampMs?: number;
+  nonce?: string;
   /** Sign these bytes instead of the body actually sent. */
-  signedBody?: string
-  purpose?: string
-  omit?: string
+  signedBody?: string;
+  purpose?: string;
+  omit?: string;
 }
 
-function signedHeaders(body: string, purpose: string, opts: SignOptions = {}): Record<string, string> {
-  const signer = opts.signer ?? hive
-  const installId = opts.headerInstallId ?? signer.installId
-  const ts = String(Math.floor((opts.timestampMs ?? now) / MS_PER_SECOND))
-  const nonce = opts.nonce ?? randomBytes(NONCE_BYTES).toString('hex')
-  const message = signingInput(opts.purpose ?? purpose, installId, ts, nonce, Buffer.from(opts.signedBody ?? body, 'utf8'))
+function signedHeaders(
+  body: string,
+  purpose: string,
+  opts: SignOptions = {}
+): Record<string, string> {
+  const signer = opts.signer ?? hive;
+  const installId = opts.headerInstallId ?? signer.installId;
+  const ts = String(Math.floor((opts.timestampMs ?? now) / MS_PER_SECOND));
+  const nonce = opts.nonce ?? randomBytes(NONCE_BYTES).toString("hex");
+  const message = signingInput(
+    opts.purpose ?? purpose,
+    installId,
+    ts,
+    nonce,
+    Buffer.from(opts.signedBody ?? body, "utf8")
+  );
   const headers: Record<string, string> = {
-    'content-type': 'application/json',
+    "content-type": "application/json",
     [HEADER_INSTALL_ID]: installId,
     [HEADER_TIMESTAMP]: ts,
     [HEADER_NONCE]: nonce,
-    [HEADER_SIGNATURE]: sign(null, message, signer.privateKey).toString('base64'),
-  }
-  if (opts.omit) delete headers[opts.omit]
-  return headers
+    [HEADER_SIGNATURE]: sign(null, message, signer.privateKey).toString(
+      "base64"
+    ),
+  };
+  if (opts.omit) delete headers[opts.omit];
+  return headers;
 }
 
-function register(target: Hive = hive, opts: SignOptions = {}, bodyOverride?: unknown): Request {
+function register(
+  target: Hive = hive,
+  opts: SignOptions = {},
+  bodyOverride?: unknown
+): Request {
   const body = JSON.stringify(
-    bodyOverride ?? { install_id: target.installId, public_key: target.publicKey, hive_version: 'abc1234' },
-  )
+    bodyOverride ?? {
+      install_id: target.installId,
+      public_key: target.publicKey,
+      hive_version: "abc1234",
+    }
+  );
   return new Request(ORIGIN + REGISTER_PATH, {
-    method: 'POST',
+    method: "POST",
     headers: signedHeaders(body, PURPOSE_REGISTER, { signer: target, ...opts }),
     body,
-  })
+  });
 }
 
 function submit(body: unknown, opts: SignOptions = {}): Request {
-  const raw = typeof body === 'string' ? body : JSON.stringify(body)
+  const raw = typeof body === "string" ? body : JSON.stringify(body);
   return new Request(ORIGIN + RELAY_BASE_PATH, {
-    method: 'POST',
+    method: "POST",
     headers: signedHeaders(raw, PURPOSE_SUBMIT, opts),
     body: raw,
-  })
+  });
 }
 
-function pending(token: string | null = HUB_SECRET, query = ''): Request {
-  const headers: Record<string, string> = {}
-  if (token) headers.authorization = `Bearer ${token}`
-  return new Request(ORIGIN + PENDING_PATH + query, { method: 'GET', headers })
+function pending(token: string | null = HUB_SECRET, query = ""): Request {
+  const headers: Record<string, string> = {};
+  if (token) headers.authorization = `Bearer ${token}`;
+  return new Request(ORIGIN + PENDING_PATH + query, { method: "GET", headers });
 }
 
 function ack(ids: unknown, token: string | null = HUB_SECRET): Request {
-  const headers: Record<string, string> = { 'content-type': 'application/json' }
-  if (token) headers.authorization = `Bearer ${token}`
-  return new Request(ORIGIN + ACK_PATH, { method: 'POST', headers, body: JSON.stringify({ ids }) })
+  const headers: Record<string, string> = {
+    "content-type": "application/json",
+  };
+  if (token) headers.authorization = `Bearer ${token}`;
+  return new Request(ORIGIN + ACK_PATH, {
+    method: "POST",
+    headers,
+    body: JSON.stringify({ ids }),
+  });
 }
 
-async function registerOk(target: Hive = hive, ip = '198.18.0.1'): Promise<void> {
-  const res = await handleRelayRequest(register(target), deps({ clientIp: ip }))
-  expect(res.status).toBe(201)
+async function registerOk(
+  target: Hive = hive,
+  ip = "198.18.0.1"
+): Promise<void> {
+  const res = await handleRelayRequest(
+    register(target),
+    deps({ clientIp: ip })
+  );
+  expect(res.status).toBe(201);
 }
 
-const GOOD = { hive_id: 'solo-hive', score: 4, feedback: 'works well', dashboard_version: 'abc1234' }
+const GOOD = {
+  hive_id: "solo-hive",
+  score: 4,
+  feedback: "works well",
+  dashboard_version: "abc1234",
+};
 
 beforeEach(() => {
-  store = new MemoryStore()
-  now = T0
-  hive = newHive()
-})
+  store = new MemoryStore();
+  now = T0;
+  hive = newHive();
+});
 
-describe('signing contract', () => {
-  it('matches the byte string the hive signs (src/pkg/dashboard/nps_relay.go)', () => {
+describe("signing contract", () => {
+  it("matches the byte string the hive signs (src/pkg/dashboard/nps_relay.go)", () => {
     const got = signingInput(
       PURPOSE_SUBMIT,
-      '11111111-2222-4333-8444-555555555555',
-      '1790000000',
-      '00112233445566778899aabbccddeeff',
-      Buffer.from('{}', 'utf8'),
-    ).toString('utf8')
+      "11111111-2222-4333-8444-555555555555",
+      "1790000000",
+      "00112233445566778899aabbccddeeff",
+      Buffer.from("{}", "utf8")
+    ).toString("utf8");
     expect(got).toBe(
-      'hive-nps-relay-v1\nsubmit\n11111111-2222-4333-8444-555555555555\n1790000000\n' +
-        '00112233445566778899aabbccddeeff\n44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a',
-    )
-  })
-
-  it('verifies a real Ed25519 signature and rejects anything malformed', () => {
-    const msg = Buffer.from('hello', 'utf8')
-    const sig = sign(null, msg, hive.privateKey).toString('base64')
-    expect(verifyEd25519(hive.publicKey, msg, sig)).toBe(true)
-    expect(verifyEd25519(hive.publicKey, Buffer.from('hellO', 'utf8'), sig)).toBe(false)
-    expect(verifyEd25519(newHive().publicKey, msg, sig)).toBe(false)
-    expect(verifyEd25519('not base64!', msg, sig)).toBe(false)
-    expect(verifyEd25519(hive.publicKey, msg, 'AAAA')).toBe(false)
-    expect(verifyEd25519(Buffer.alloc(31).toString('base64'), msg, sig)).toBe(false)
-  })
-})
-
-describe('POST /api/nps/register', () => {
-  it('registers a new install with no operator configuration', async () => {
-    const res = await handleRelayRequest(register(), deps({ env: {} }))
-    expect(res.status).toBe(201)
-    const rec = store.data.get(`${INSTALL_PREFIX}${hive.installId}`) as InstallRecord
-    expect(rec).toMatchObject({ public_key: hive.publicKey, hive_version: 'abc1234', registered_at: new Date(T0).toISOString() })
+      "hive-nps-relay-v1\nsubmit\n11111111-2222-4333-8444-555555555555\n1790000000\n" +
+        "00112233445566778899aabbccddeeff\n44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a"
+    );
+  });
+
+  it("verifies a real Ed25519 signature and rejects anything malformed", () => {
+    const msg = Buffer.from("hello", "utf8");
+    const sig = sign(null, msg, hive.privateKey).toString("base64");
+    expect(verifyEd25519(hive.publicKey, msg, sig)).toBe(true);
+    expect(
+      verifyEd25519(hive.publicKey, Buffer.from("hellO", "utf8"), sig)
+    ).toBe(false);
+    expect(verifyEd25519(newHive().publicKey, msg, sig)).toBe(false);
+    expect(verifyEd25519("not base64!", msg, sig)).toBe(false);
+    expect(verifyEd25519(hive.publicKey, msg, "AAAA")).toBe(false);
+    expect(verifyEd25519(Buffer.alloc(31).toString("base64"), msg, sig)).toBe(
+      false
+    );
+  });
+});
+
+describe("POST /api/nps/register", () => {
+  it("registers a new install with no operator configuration", async () => {
+    const res = await handleRelayRequest(register(), deps({ env: {} }));
+    expect(res.status).toBe(201);
+    const rec = store.data.get(
+      `${INSTALL_PREFIX}${hive.installId}`
+    ) as InstallRecord;
+    expect(rec).toMatchObject({
+      public_key: hive.publicKey,
+      hive_version: "abc1234",
+      registered_at: new Date(T0).toISOString(),
+    });
     // The client IP is stored only as a hash.
-    expect([...store.data.keys()].some((k) => k.includes('203.0.113.7'))).toBe(false)
-  })
-
-  it('is idempotent for the same install id and key, without consuming quota', async () => {
-    await registerOk()
-    const writes = store.writes
+    expect([...store.data.keys()].some(k => k.includes("203.0.113.7"))).toBe(
+      false
+    );
+  });
+
+  it("is idempotent for the same install id and key, without consuming quota", async () => {
+    await registerOk();
+    const writes = store.writes;
     for (let i = 0; i < MAX_REGISTRATIONS_PER_IP_PER_WINDOW + 1; i++) {
-      const res = await handleRelayRequest(register(), deps({ clientIp: '198.18.0.1' }))
-      expect(res.status).toBe(200)
-      expect(await res.json()).toEqual({ ok: true, registered: false })
+      const res = await handleRelayRequest(
+        register(),
+        deps({ clientIp: "198.18.0.1" })
+      );
+      expect(res.status).toBe(200);
+      expect(await res.json()).toEqual({ ok: true, registered: false });
     }
-    expect(store.writes).toBe(writes)
-  })
-
-  it('rejects a different key for an existing install id (no takeover)', async () => {
-    await registerOk()
-    const attacker = { ...newHive(), installId: hive.installId }
-    const res = await handleRelayRequest(register(attacker), deps({ clientIp: '198.51.100.9' }))
-    expect(res.status).toBe(409)
-    expect((store.data.get(`${INSTALL_PREFIX}${hive.installId}`) as InstallRecord).public_key).toBe(hive.publicKey)
-  })
-
-  it('requires proof of possession of the registered key', async () => {
-    const other = newHive()
+    expect(store.writes).toBe(writes);
+  });
+
+  it("rejects a different key for an existing install id (no takeover)", async () => {
+    await registerOk();
+    const attacker = { ...newHive(), installId: hive.installId };
+    const res = await handleRelayRequest(
+      register(attacker),
+      deps({ clientIp: "198.51.100.9" })
+    );
+    expect(res.status).toBe(409);
+    expect(
+      (store.data.get(`${INSTALL_PREFIX}${hive.installId}`) as InstallRecord)
+        .public_key
+    ).toBe(hive.publicKey);
+  });
+
+  it("requires proof of possession of the registered key", async () => {
+    const other = newHive();
     // Body registers hive's key, but the request is signed by another key.
-    const body = { install_id: hive.installId, public_key: hive.publicKey }
-    const forged = register(hive, { signer: other, headerInstallId: hive.installId }, body)
-    expect((await handleRelayRequest(forged, deps())).status).toBe(401)
+    const body = { install_id: hive.installId, public_key: hive.publicKey };
+    const forged = register(
+      hive,
+      { signer: other, headerInstallId: hive.installId },
+      body
+    );
+    expect((await handleRelayRequest(forged, deps())).status).toBe(401);
     // Header install id must match the body's.
-    const mismatch = register(hive, { headerInstallId: other.installId })
-    expect((await handleRelayRequest(mismatch, deps())).status).toBe(401)
+    const mismatch = register(hive, { headerInstallId: other.installId });
+    expect((await handleRelayRequest(mismatch, deps())).status).toBe(401);
     // Missing signature, stale timestamp.
-    expect((await handleRelayRequest(register(hive, { omit: HEADER_SIGNATURE }), deps())).status).toBe(401)
-    const stale = register(hive, { timestampMs: T0 - SIGNATURE_MAX_SKEW_MS - MS_PER_SECOND })
-    expect((await handleRelayRequest(stale, deps())).status).toBe(401)
+    expect(
+      (
+        await handleRelayRequest(
+          register(hive, { omit: HEADER_SIGNATURE }),
+          deps()
+        )
+      ).status
+    ).toBe(401);
+    const stale = register(hive, {
+      timestampMs: T0 - SIGNATURE_MAX_SKEW_MS - MS_PER_SECOND,
+    });
+    expect((await handleRelayRequest(stale, deps())).status).toBe(401);
     // A submit-purpose signature cannot register.
-    expect((await handleRelayRequest(register(hive, { purpose: PURPOSE_SUBMIT }), deps())).status).toBe(401)
-    expect(store.writes).toBe(0)
-  })
-
-  it('validates the registration body', async () => {
-    expect(validateRegistration({ install_id: 'NOT-A-UUID', public_key: hive.publicKey }).ok).toBe(false)
+    expect(
+      (
+        await handleRelayRequest(
+          register(hive, { purpose: PURPOSE_SUBMIT }),
+          deps()
+        )
+      ).status
+    ).toBe(401);
+    expect(store.writes).toBe(0);
+  });
+
+  it("validates the registration body", async () => {
+    expect(
+      validateRegistration({
+        install_id: "NOT-A-UUID",
+        public_key: hive.publicKey,
+      }).ok
+    ).toBe(false);
     // The fixture ids are all digits, so upper-casing them is a no-op; use an
     // id with hex letters to prove an uppercase UUID is rejected.
-    expect(validateRegistration({ install_id: 'ABCDEF00-0000-4000-8000-00000000000A', public_key: hive.publicKey }).ok).toBe(false)
-    expect(validateRegistration({ install_id: 'abcdef00-0000-4000-8000-00000000000a', public_key: hive.publicKey }).ok).toBe(true)
-    expect(validateRegistration({ install_id: hive.installId, public_key: 'AAAA' }).ok).toBe(false)
-    expect(validateRegistration({ install_id: hive.installId, public_key: 42 }).ok).toBe(false)
-    expect(validateRegistration([hive.installId]).ok).toBe(false)
-    const res = await handleRelayRequest(register(hive, {}, { install_id: hive.installId, public_key: 'short' }), deps())
-    expect(res.status).toBe(400)
-    const huge = register(hive, {}, { install_id: hive.installId, public_key: hive.publicKey, pad: 'x'.repeat(MAX_REGISTER_BODY_BYTES) })
-    expect((await handleRelayRequest(huge, deps())).status).toBe(413)
-    expect(store.writes).toBe(0)
-  })
-
-  it('rate limits new registrations per IP per 24h', async () => {
+    expect(
+      validateRegistration({
+        install_id: "ABCDEF00-0000-4000-8000-00000000000A",
+        public_key: hive.publicKey,
+      }).ok
+    ).toBe(false);
+    expect(
+      validateRegistration({
+        install_id: "abcdef00-0000-4000-8000-00000000000a",
+        public_key: hive.publicKey,
+      }).ok
+    ).toBe(true);
+    expect(
+      validateRegistration({ install_id: hive.installId, public_key: "AAAA" })
+        .ok
+    ).toBe(false);
+    expect(
+      validateRegistration({ install_id: hive.installId, public_key: 42 }).ok
+    ).toBe(false);
+    expect(validateRegistration([hive.installId]).ok).toBe(false);
+    const res = await handleRelayRequest(
+      register(hive, {}, { install_id: hive.installId, public_key: "short" }),
+      deps()
+    );
+    expect(res.status).toBe(400);
+    const huge = register(
+      hive,
+      {},
+      {
+        install_id: hive.installId,
+        public_key: hive.publicKey,
+        pad: "x".repeat(MAX_REGISTER_BODY_BYTES),
+      }
+    );
+    expect((await handleRelayRequest(huge, deps())).status).toBe(413);
+    expect(store.writes).toBe(0);
+  });
+
+  it("rate limits new registrations per IP per 24h", async () => {
     for (let i = 0; i < MAX_REGISTRATIONS_PER_IP_PER_WINDOW; i++) {
-      expect((await handleRelayRequest(register(newHive()), deps())).status).toBe(201)
+      expect(
+        (await handleRelayRequest(register(newHive()), deps())).status
+      ).toBe(201);
     }
-    const extra = newHive()
-    expect((await handleRelayRequest(register(extra), deps())).status).toBe(429)
-    expect(store.data.has(`${INSTALL_PREFIX}${extra.installId}`)).toBe(false)
+    const extra = newHive();
+    expect((await handleRelayRequest(register(extra), deps())).status).toBe(
+      429
+    );
+    expect(store.data.has(`${INSTALL_PREFIX}${extra.installId}`)).toBe(false);
     // Another IP is not affected; the first IP recovers after the window.
-    expect((await handleRelayRequest(register(extra), deps({ clientIp: '198.51.100.3' }))).status).toBe(201)
-    now = T0 + RATE_WINDOW_MS
-    expect((await handleRelayRequest(register(newHive()), deps())).status).toBe(201)
-  })
-
-  it('caps new registrations per day globally', async () => {
-    const dayKey = `${REGISTER_DAY_PREFIX}${new Date(T0).toISOString().slice(0, 10)}`
-    store.data.set(dayKey, { count: MAX_REGISTRATIONS_PER_DAY - 1 })
-    expect((await handleRelayRequest(register(), deps({ clientIp: '198.51.100.1' }))).status).toBe(201)
-    const late = newHive()
-    expect((await handleRelayRequest(register(late), deps({ clientIp: '198.51.100.2' }))).status).toBe(429)
-    expect(store.data.has(`${INSTALL_PREFIX}${late.installId}`)).toBe(false)
+    expect(
+      (
+        await handleRelayRequest(
+          register(extra),
+          deps({ clientIp: "198.51.100.3" })
+        )
+      ).status
+    ).toBe(201);
+    now = T0 + RATE_WINDOW_MS;
+    expect((await handleRelayRequest(register(newHive()), deps())).status).toBe(
+      201
+    );
+  });
+
+  it("caps new registrations per day globally", async () => {
+    const dayKey = `${REGISTER_DAY_PREFIX}${new Date(T0).toISOString().slice(0, 10)}`;
+    store.data.set(dayKey, { count: MAX_REGISTRATIONS_PER_DAY - 1 });
+    expect(
+      (await handleRelayRequest(register(), deps({ clientIp: "198.51.100.1" })))
+        .status
+    ).toBe(201);
+    const late = newHive();
+    expect(
+      (
+        await handleRelayRequest(
+          register(late),
+          deps({ clientIp: "198.51.100.2" })
+        )
+      ).status
+    ).toBe(429);
+    expect(store.data.has(`${INSTALL_PREFIX}${late.installId}`)).toBe(false);
     // An already-registered install can still re-register idempotently.
-    expect((await handleRelayRequest(register(), deps())).status).toBe(200)
-  })
-})
+    expect((await handleRelayRequest(register(), deps())).status).toBe(200);
+  });
+});
 
-describe('POST /api/nps (submit)', () => {
+describe("POST /api/nps (submit)", () => {
   beforeEach(async () => {
-    await registerOk()
-  })
+    await registerOk();
+  });
 
-  it('stores a signed submission with its install id, with no operator configuration', async () => {
-    const res = await handleRelayRequest(submit(GOOD), deps({ env: {} }))
-    expect(res.status).toBe(201)
-    const [entry] = store.entries()
+  it("stores a signed submission with its install id, with no operator configuration", async () => {
+    const res = await handleRelayRequest(submit(GOOD), deps({ env: {} }));
+    expect(res.status).toBe(201);
+    const [entry] = store.entries();
     expect(entry).toMatchObject({
       install_id: hive.installId,
-      hive_id: 'solo-hive',
+      hive_id: "solo-hive",
       score: 4,
-      feedback: 'works well',
-      dashboard_version: 'abc1234',
+      feedback: "works well",
+      dashboard_version: "abc1234",
       timestamp: new Date(T0).toISOString(),
-    })
-    expect(entry.id).toMatch(/^\d{13}-[0-9a-f-]{36}$/)
-    expect([...store.data.keys()].some((k) => k.includes('203.0.113.7'))).toBe(false)
-  })
-
-  it('rejects missing or bad signatures without writing anything', async () => {
-    const before = store.writes
+    });
+    expect(entry.id).toMatch(/^\d{13}-[0-9a-f-]{36}$/);
+    expect([...store.data.keys()].some(k => k.includes("203.0.113.7"))).toBe(
+      false
+    );
+  });
+
+  it("rejects missing or bad signatures without writing anything", async () => {
+    const before = store.writes;
     const cases: Request[] = [
       submit(GOOD, { omit: HEADER_SIGNATURE }),
       submit(GOOD, { omit: HEADER_NONCE }),
@@ -364,354 +524,468 @@ describe('POST /api/nps (submit)', () => {
       // A register-purpose signature cannot submit.
       submit(GOOD, { purpose: PURPOSE_REGISTER }),
       // Malformed nonce.
-      submit(GOOD, { nonce: 'xyz' }),
-    ]
+      submit(GOOD, { nonce: "xyz" }),
+    ];
     for (const req of cases) {
-      const res = await handleRelayRequest(req, deps())
-      expect(res.status).toBe(401)
+      const res = await handleRelayRequest(req, deps());
+      expect(res.status).toBe(401);
     }
-    expect(store.writes).toBe(before)
-    expect(store.entries()).toHaveLength(0)
-  })
-
-  it('answers unknown_install for an unregistered install id so the hive re-registers', async () => {
-    const stranger = newHive()
-    const before = store.writes
-    const res = await handleRelayRequest(submit(GOOD, { signer: stranger }), deps())
-    expect(res.status).toBe(401)
-    expect(await res.json()).toMatchObject({ code: UNKNOWN_INSTALL_CODE })
-    expect(store.writes).toBe(before)
+    expect(store.writes).toBe(before);
+    expect(store.entries()).toHaveLength(0);
+  });
+
+  it("answers unknown_install for an unregistered install id so the hive re-registers", async () => {
+    const stranger = newHive();
+    const before = store.writes;
+    const res = await handleRelayRequest(
+      submit(GOOD, { signer: stranger }),
+      deps()
+    );
+    expect(res.status).toBe(401);
+    expect(await res.json()).toMatchObject({ code: UNKNOWN_INSTALL_CODE });
+    expect(store.writes).toBe(before);
 
     // After re-registering, the same install submits fine.
-    await registerOk(stranger, '198.18.0.2')
-    expect((await handleRelayRequest(submit(GOOD, { signer: stranger }), deps({ clientIp: '198.51.100.4' }))).status).toBe(201)
-  })
-
-  it('rejects timestamps outside the window', async () => {
-    const stale = submit(GOOD, { timestampMs: T0 - SIGNATURE_MAX_SKEW_MS - MS_PER_SECOND })
-    const future = submit(GOOD, { timestampMs: T0 + SIGNATURE_MAX_SKEW_MS + MS_PER_SECOND })
-    expect((await handleRelayRequest(stale, deps())).status).toBe(401)
-    expect((await handleRelayRequest(future, deps())).status).toBe(401)
-    const edge = submit(GOOD, { timestampMs: T0 - SIGNATURE_MAX_SKEW_MS + MS_PER_SECOND })
-    expect((await handleRelayRequest(edge, deps())).status).toBe(201)
-  })
-
-  it('rejects a replayed nonce, even from another IP', async () => {
-    const nonce = 'a'.repeat(32)
-    expect((await handleRelayRequest(submit(GOOD, { nonce }), deps())).status).toBe(201)
-    const replay = await handleRelayRequest(submit(GOOD, { nonce }), deps({ clientIp: '198.51.100.5' }))
-    expect(replay.status).toBe(401)
-    expect(store.entries()).toHaveLength(1)
-    expect(store.data.has(`${NONCE_PREFIX}${hive.installId}`)).toBe(true)
-  })
-
-  it('bounds the live nonces kept per install', async () => {
-    const seen = Array.from({ length: MAX_NONCES_PER_INSTALL }, (_, i) => ({ n: String(i).padStart(32, '0'), t: T0 }))
-    store.data.set(`${NONCE_PREFIX}${hive.installId}`, { seen })
-    expect((await handleRelayRequest(submit(GOOD), deps())).status).toBe(429)
+    await registerOk(stranger, "198.18.0.2");
+    expect(
+      (
+        await handleRelayRequest(
+          submit(GOOD, { signer: stranger }),
+          deps({ clientIp: "198.51.100.4" })
+        )
+      ).status
+    ).toBe(201);
+  });
+
+  it("rejects timestamps outside the window", async () => {
+    const stale = submit(GOOD, {
+      timestampMs: T0 - SIGNATURE_MAX_SKEW_MS - MS_PER_SECOND,
+    });
+    const future = submit(GOOD, {
+      timestampMs: T0 + SIGNATURE_MAX_SKEW_MS + MS_PER_SECOND,
+    });
+    expect((await handleRelayRequest(stale, deps())).status).toBe(401);
+    expect((await handleRelayRequest(future, deps())).status).toBe(401);
+    const edge = submit(GOOD, {
+      timestampMs: T0 - SIGNATURE_MAX_SKEW_MS + MS_PER_SECOND,
+    });
+    expect((await handleRelayRequest(edge, deps())).status).toBe(201);
+  });
+
+  it("rejects a replayed nonce, even from another IP", async () => {
+    const nonce = "a".repeat(32);
+    expect(
+      (await handleRelayRequest(submit(GOOD, { nonce }), deps())).status
+    ).toBe(201);
+    const replay = await handleRelayRequest(
+      submit(GOOD, { nonce }),
+      deps({ clientIp: "198.51.100.5" })
+    );
+    expect(replay.status).toBe(401);
+    expect(store.entries()).toHaveLength(1);
+    expect(store.data.has(`${NONCE_PREFIX}${hive.installId}`)).toBe(true);
+  });
+
+  it("bounds the live nonces kept per install", async () => {
+    const seen = Array.from({ length: MAX_NONCES_PER_INSTALL }, (_, i) => ({
+      n: String(i).padStart(32, "0"),
+      t: T0,
+    }));
+    store.data.set(`${NONCE_PREFIX}${hive.installId}`, { seen });
+    expect((await handleRelayRequest(submit(GOOD), deps())).status).toBe(429);
     // Once they age out, the install can submit again.
-    now = T0 + 2 * SIGNATURE_MAX_SKEW_MS
-    expect((await handleRelayRequest(submit(GOOD), deps())).status).toBe(201)
-  })
-
-  it('rate limits one submission per IP per 24h', async () => {
-    expect((await handleRelayRequest(submit(GOOD), deps())).status).toBe(201)
-    expect((await handleRelayRequest(submit(GOOD), deps())).status).toBe(429)
-    expect((await handleRelayRequest(submit(GOOD), deps({ clientIp: '198.51.100.1' }))).status).toBe(201)
-    now = T0 + RATE_WINDOW_MS
-    expect((await handleRelayRequest(submit(GOOD), deps())).status).toBe(201)
-    expect(store.entries()).toHaveLength(3)
-  })
-
-  it('caps submissions per install across IPs', async () => {
+    now = T0 + 2 * SIGNATURE_MAX_SKEW_MS;
+    expect((await handleRelayRequest(submit(GOOD), deps())).status).toBe(201);
+  });
+
+  it("rate limits one submission per IP per 24h", async () => {
+    expect((await handleRelayRequest(submit(GOOD), deps())).status).toBe(201);
+    expect((await handleRelayRequest(submit(GOOD), deps())).status).toBe(429);
+    expect(
+      (
+        await handleRelayRequest(
+          submit(GOOD),
+          deps({ clientIp: "198.51.100.1" })
+        )
+      ).status
+    ).toBe(201);
+    now = T0 + RATE_WINDOW_MS;
+    expect((await handleRelayRequest(submit(GOOD), deps())).status).toBe(201);
+    expect(store.entries()).toHaveLength(3);
+  });
+
+  it("caps submissions per install across IPs", async () => {
     for (let i = 0; i < MAX_PER_INSTALL_PER_WINDOW; i++) {
-      const res = await handleRelayRequest(submit(GOOD), deps({ clientIp: `198.51.100.${i}` }))
-      expect(res.status).toBe(201)
+      const res = await handleRelayRequest(
+        submit(GOOD),
+        deps({ clientIp: `198.51.100.${i}` })
+      );
+      expect(res.status).toBe(201);
     }
-    const res = await handleRelayRequest(submit(GOOD), deps({ clientIp: '192.0.2.99' }))
-    expect(res.status).toBe(429)
-    expect(store.entries()).toHaveLength(MAX_PER_INSTALL_PER_WINDOW)
-  })
-
-  it('caps the body by bytes read, including chunked bodies with no Content-Length', async () => {
-    const chunk = new Uint8Array(1024).fill(0x20)
-    const chunks = Math.ceil(MAX_SUBMIT_BODY_BYTES / chunk.byteLength) + 1
+    const res = await handleRelayRequest(
+      submit(GOOD),
+      deps({ clientIp: "192.0.2.99" })
+    );
+    expect(res.status).toBe(429);
+    expect(store.entries()).toHaveLength(MAX_PER_INSTALL_PER_WINDOW);
+  });
+
+  it("caps the body by bytes read, including chunked bodies with no Content-Length", async () => {
+    const chunk = new Uint8Array(1024).fill(0x20);
+    const chunks = Math.ceil(MAX_SUBMIT_BODY_BYTES / chunk.byteLength) + 1;
     const stream = new ReadableStream<Uint8Array>({
       start(controller) {
-        for (let i = 0; i < chunks; i++) controller.enqueue(chunk)
-        controller.close()
+        for (let i = 0; i < chunks; i++) controller.enqueue(chunk);
+        controller.close();
       },
-    })
+    });
     const req = new Request(ORIGIN + RELAY_BASE_PATH, {
-      method: 'POST',
-      headers: signedHeaders('', PURPOSE_SUBMIT),
+      method: "POST",
+      headers: signedHeaders("", PURPOSE_SUBMIT),
       body: stream,
-      duplex: 'half',
-    } as RequestInit & { duplex: 'half' })
-    expect((await handleRelayRequest(req, deps())).status).toBe(413)
-
-    const padded = JSON.stringify({ ...GOOD, pad: 'x'.repeat(MAX_SUBMIT_BODY_BYTES) })
-    expect((await handleRelayRequest(submit(padded), deps({ clientIp: '198.51.100.2' }))).status).toBe(413)
-    expect(store.entries()).toHaveLength(0)
-  })
-
-  it('never reads Content-Length to decide the cap', () => {
-    const src = readFileSync(path.join(HERE, 'relay.ts'), 'utf8')
-    expect(src.toLowerCase()).not.toContain("headers.get('content-length')")
-  })
-
-  it('validates score, feedback and hive_id', async () => {
+      duplex: "half",
+    } as RequestInit & { duplex: "half" });
+    expect((await handleRelayRequest(req, deps())).status).toBe(413);
+
+    const padded = JSON.stringify({
+      ...GOOD,
+      pad: "x".repeat(MAX_SUBMIT_BODY_BYTES),
+    });
+    expect(
+      (
+        await handleRelayRequest(
+          submit(padded),
+          deps({ clientIp: "198.51.100.2" })
+        )
+      ).status
+    ).toBe(413);
+    expect(store.entries()).toHaveLength(0);
+  });
+
+  it("never reads Content-Length to decide the cap", () => {
+    const src = readFileSync(path.join(HERE, "relay.ts"), "utf8");
+    expect(src.toLowerCase()).not.toContain("headers.get('content-length')");
+  });
+
+  it("validates score, feedback and hive_id", async () => {
     const bad: unknown[] = [
       { ...GOOD, score: 0 },
       { ...GOOD, score: 5 },
       { ...GOOD, score: 2.5 },
-      { ...GOOD, score: '4' },
+      { ...GOOD, score: "4" },
       { ...GOOD, score: undefined },
-      { ...GOOD, feedback: 'x'.repeat(MAX_FEEDBACK_CHARS + 1) },
+      { ...GOOD, feedback: "x".repeat(MAX_FEEDBACK_CHARS + 1) },
       { ...GOOD, feedback: 42 },
-      { ...GOOD, hive_id: '' },
-      { ...GOOD, hive_id: 'has space' },
-      { ...GOOD, hive_id: 'x'.repeat(101) },
+      { ...GOOD, hive_id: "" },
+      { ...GOOD, hive_id: "has space" },
+      { ...GOOD, hive_id: "x".repeat(101) },
       [GOOD],
-      'not json',
-    ]
+      "not json",
+    ];
     for (const [i, body] of bad.entries()) {
-      const res = await handleRelayRequest(submit(body), deps({ clientIp: `198.51.100.${i}` }))
-      expect(res.status, JSON.stringify(body)).toBe(400)
+      const res = await handleRelayRequest(
+        submit(body),
+        deps({ clientIp: `198.51.100.${i}` })
+      );
+      expect(res.status, JSON.stringify(body)).toBe(400);
     }
-    expect(store.entries()).toHaveLength(0)
+    expect(store.entries()).toHaveLength(0);
 
-    const atLimit = { ...GOOD, feedback: 'y'.repeat(MAX_FEEDBACK_CHARS) }
-    expect((await handleRelayRequest(submit(atLimit), deps())).status).toBe(201)
-  })
+    const atLimit = { ...GOOD, feedback: "y".repeat(MAX_FEEDBACK_CHARS) };
+    expect((await handleRelayRequest(submit(atLimit), deps())).status).toBe(
+      201
+    );
+  });
 
-  it('keeps a rolling window of entries', async () => {
+  it("keeps a rolling window of entries", async () => {
     for (let i = 0; i < MAX_ENTRIES; i++) {
-      const id = `${String(i).padStart(13, '0')}-00000000-0000-0000-0000-000000000000`
-      store.data.set(`${ENTRY_PREFIX}${id}`, { id })
+      const id = `${String(i).padStart(13, "0")}-00000000-0000-0000-0000-000000000000`;
+      store.data.set(`${ENTRY_PREFIX}${id}`, { id });
     }
-    expect((await handleRelayRequest(submit(GOOD), deps())).status).toBe(201)
-    const entries = store.entries()
-    expect(entries).toHaveLength(MAX_ENTRIES)
-    expect(entries[0].id.startsWith('0000000000000-')).toBe(false)
-    expect(entries[entries.length - 1].hive_id).toBe('solo-hive')
-  })
-})
-
-describe('no public read path', () => {
+    expect((await handleRelayRequest(submit(GOOD), deps())).status).toBe(201);
+    const entries = store.entries();
+    expect(entries).toHaveLength(MAX_ENTRIES);
+    expect(entries[0].id.startsWith("0000000000000-")).toBe(false);
+    expect(entries[entries.length - 1].hive_id).toBe("solo-hive");
+  });
+});
+
+describe("no public read path", () => {
   beforeEach(async () => {
-    await registerOk()
-  })
+    await registerOk();
+  });
 
-  it('refuses GET and OPTIONS on the submit and register routes', async () => {
-    await handleRelayRequest(submit(GOOD), deps())
+  it("refuses GET and OPTIONS on the submit and register routes", async () => {
+    await handleRelayRequest(submit(GOOD), deps());
     for (const route of [RELAY_BASE_PATH, REGISTER_PATH]) {
-      for (const method of ['GET', 'OPTIONS', 'PUT', 'DELETE']) {
-        const res = await handleRelayRequest(new Request(ORIGIN + route, { method }), deps())
-        expect(res.status).toBe(405)
-        const text = await res.text()
-        expect(text).not.toContain('works well')
-        expect(text).not.toContain(hive.publicKey)
+      for (const method of ["GET", "OPTIONS", "PUT", "DELETE"]) {
+        const res = await handleRelayRequest(
+          new Request(ORIGIN + route, { method }),
+          deps()
+        );
+        expect(res.status).toBe(405);
+        const text = await res.text();
+        expect(text).not.toContain("works well");
+        expect(text).not.toContain(hive.publicKey);
       }
     }
-  })
-
-  it('refuses the hub routes without the hub secret', async () => {
-    await handleRelayRequest(submit(GOOD), deps())
-    for (const token of [null, 'not-the-secret', hive.publicKey]) {
-      const res = await handleRelayRequest(pending(token), deps())
-      expect(res.status).toBe(401)
-      expect(await res.text()).not.toContain('works well')
-      expect((await handleRelayRequest(ack(['x'], token), deps())).status).toBe(401)
+  });
+
+  it("refuses the hub routes without the hub secret", async () => {
+    await handleRelayRequest(submit(GOOD), deps());
+    for (const token of [null, "not-the-secret", hive.publicKey]) {
+      const res = await handleRelayRequest(pending(token), deps());
+      expect(res.status).toBe(401);
+      expect(await res.text()).not.toContain("works well");
+      expect((await handleRelayRequest(ack(["x"], token), deps())).status).toBe(
+        401
+      );
     }
-    expect(store.entries()).toHaveLength(1)
-  })
+    expect(store.entries()).toHaveLength(1);
+  });
 
-  it('answers 503 on hub routes only when no hub secret is configured', async () => {
-    const noHub = deps({ env: {} })
-    expect((await handleRelayRequest(pending(), noHub)).status).toBe(503)
-    expect((await handleRelayRequest(ack([]), noHub)).status).toBe(503)
+  it("answers 503 on hub routes only when no hub secret is configured", async () => {
+    const noHub = deps({ env: {} });
+    expect((await handleRelayRequest(pending(), noHub)).status).toBe(503);
+    expect((await handleRelayRequest(ack([]), noHub)).status).toBe(503);
     // Hives are unaffected by the missing hub secret.
-    expect((await handleRelayRequest(submit(GOOD), noHub)).status).toBe(201)
-    expect((await handleRelayRequest(register(newHive()), noHub)).status).toBe(201)
-  })
-
-  it('404s any other path', async () => {
-    const res = await handleRelayRequest(new Request(`${ORIGIN}/api/nps/all`), deps())
-    expect(res.status).toBe(404)
-  })
-})
-
-describe('hub pull and ack', () => {
+    expect((await handleRelayRequest(submit(GOOD), noHub)).status).toBe(201);
+    expect((await handleRelayRequest(register(newHive()), noHub)).status).toBe(
+      201
+    );
+  });
+
+  it("404s any other path", async () => {
+    const res = await handleRelayRequest(
+      new Request(`${ORIGIN}/api/nps/all`),
+      deps()
+    );
+    expect(res.status).toBe(404);
+  });
+});
+
+describe("hub pull and ack", () => {
   beforeEach(async () => {
-    await registerOk()
-  })
+    await registerOk();
+  });
 
   async function seed(count: number): Promise<void> {
     for (let i = 0; i < count; i++) {
-      now = T0 + i
+      now = T0 + i;
       const res = await handleRelayRequest(
         submit({ ...GOOD, score: (i % 4) + 1 }),
-        deps({ clientIp: `10.0.${i >> 8}.${i & 255}` }),
-      )
-      expect(res.status).toBe(201)
+        deps({ clientIp: `10.0.${i >> 8}.${i & 255}` })
+      );
+      expect(res.status).toBe(201);
     }
   }
 
-  it('returns entries oldest first, honoring the limit, with install ids', async () => {
-    await seed(3)
-    const res = await handleRelayRequest(pending(HUB_SECRET, '?limit=2'), deps())
-    expect(res.status).toBe(200)
-    expect(res.headers.get('cache-control')).toBe('no-store')
-    const { entries } = (await res.json()) as { entries: RelayEntry[] }
-    expect(entries.map((e) => e.score)).toEqual([1, 2])
-    expect(entries.every((e) => e.install_id === hive.installId)).toBe(true)
-    expect(entries[0].timestamp < entries[1].timestamp).toBe(true)
-  })
-
-  it('never returns more than one batch', async () => {
-    const seeded = MAX_PULL_BATCH + 1
+  it("returns entries oldest first, honoring the limit, with install ids", async () => {
+    await seed(3);
+    const res = await handleRelayRequest(
+      pending(HUB_SECRET, "?limit=2"),
+      deps()
+    );
+    expect(res.status).toBe(200);
+    expect(res.headers.get("cache-control")).toBe("no-store");
+    const { entries } = (await res.json()) as { entries: RelayEntry[] };
+    expect(entries.map(e => e.score)).toEqual([1, 2]);
+    expect(entries.every(e => e.install_id === hive.installId)).toBe(true);
+    expect(entries[0].timestamp < entries[1].timestamp).toBe(true);
+  });
+
+  it("never returns more than one batch", async () => {
+    const seeded = MAX_PULL_BATCH + 1;
     for (let i = 0; i < seeded; i++) {
-      const id = `${String(T0 + i).padStart(13, '0')}-00000000-0000-0000-0000-${String(i).padStart(12, '0')}`
-      store.data.set(`${ENTRY_PREFIX}${id}`, { id, score: 3 })
+      const id = `${String(T0 + i).padStart(13, "0")}-00000000-0000-0000-0000-${String(i).padStart(12, "0")}`;
+      store.data.set(`${ENTRY_PREFIX}${id}`, { id, score: 3 });
     }
-    const res = await handleRelayRequest(pending(HUB_SECRET, '?limit=100000'), deps())
-    const { entries } = (await res.json()) as { entries: RelayEntry[] }
-    expect(entries).toHaveLength(MAX_PULL_BATCH)
-  })
-
-  it('never exposes registered keys or nonces through a pull', async () => {
-    await seed(1)
-    const text = await (await handleRelayRequest(pending(), deps())).text()
-    expect(text).not.toContain(hive.publicKey)
-    expect(text).not.toContain('registered_at')
-  })
-
-  it('acks delete exactly the listed well-formed ids and are idempotent', async () => {
-    await seed(3)
-    const { entries } = (await (await handleRelayRequest(pending(), deps())).json()) as { entries: RelayEntry[] }
-    const [first, second] = entries
-    const res = await handleRelayRequest(ack([first.id, second.id, 'bogus/../id', 7]), deps())
-    expect(res.status).toBe(200)
-    expect(await res.json()).toEqual({ deleted: 2 })
-    expect(store.entries().map((e) => e.id)).toEqual([entries[2].id])
-
-    expect((await handleRelayRequest(ack([first.id, second.id]), deps())).status).toBe(200)
-    expect(store.entries()).toHaveLength(1)
+    const res = await handleRelayRequest(
+      pending(HUB_SECRET, "?limit=100000"),
+      deps()
+    );
+    const { entries } = (await res.json()) as { entries: RelayEntry[] };
+    expect(entries).toHaveLength(MAX_PULL_BATCH);
+  });
+
+  it("never exposes registered keys or nonces through a pull", async () => {
+    await seed(1);
+    const text = await (await handleRelayRequest(pending(), deps())).text();
+    expect(text).not.toContain(hive.publicKey);
+    expect(text).not.toContain("registered_at");
+  });
+
+  it("acks delete exactly the listed well-formed ids and are idempotent", async () => {
+    await seed(3);
+    const { entries } = (await (
+      await handleRelayRequest(pending(), deps())
+    ).json()) as { entries: RelayEntry[] };
+    const [first, second] = entries;
+    const res = await handleRelayRequest(
+      ack([first.id, second.id, "bogus/../id", 7]),
+      deps()
+    );
+    expect(res.status).toBe(200);
+    expect(await res.json()).toEqual({ deleted: 2 });
+    expect(store.entries().map(e => e.id)).toEqual([entries[2].id]);
+
+    expect(
+      (await handleRelayRequest(ack([first.id, second.id]), deps())).status
+    ).toBe(200);
+    expect(store.entries()).toHaveLength(1);
     // Acks never touch registrations.
-    expect(store.data.has(`${INSTALL_PREFIX}${hive.installId}`)).toBe(true)
-  })
-
-  it('rejects an ack that is not a bounded id list', async () => {
-    expect((await handleRelayRequest(ack('nope'), deps())).status).toBe(400)
-    const tooMany = Array.from({ length: MAX_PULL_BATCH + 1 }, (_, i) => String(i))
-    expect((await handleRelayRequest(ack(tooMany), deps())).status).toBe(400)
-  })
-})
-
-describe('concurrent requests', () => {
+    expect(store.data.has(`${INSTALL_PREFIX}${hive.installId}`)).toBe(true);
+  });
+
+  it("rejects an ack that is not a bounded id list", async () => {
+    expect((await handleRelayRequest(ack("nope"), deps())).status).toBe(400);
+    const tooMany = Array.from({ length: MAX_PULL_BATCH + 1 }, (_, i) =>
+      String(i)
+    );
+    expect((await handleRelayRequest(ack(tooMany), deps())).status).toBe(400);
+  });
+});
+
+describe("concurrent requests", () => {
   // Each test fires a burst of requests without awaiting between them, so
   // every handler reads the same pre-burst records: the race an attacker
   // creates by sending many requests at once to parallel function instances.
   function statuses(responses: Response[]): Record<number, number> {
-    return responses.reduce<Record<number, number>>((acc, r) => ({ ...acc, [r.status]: (acc[r.status] ?? 0) + 1 }), {})
+    return responses.reduce<Record<number, number>>(
+      (acc, r) => ({ ...acc, [r.status]: (acc[r.status] ?? 0) + 1 }),
+      {}
+    );
   }
 
-  it('holds the per-IP submission cap under a concurrent burst', async () => {
-    await registerOk()
-    const burst = 8
-    const responses = await Promise.all(Array.from({ length: burst }, () => handleRelayRequest(submit(GOOD), deps())))
-    expect(statuses(responses)[201]).toBe(MAX_PER_IP_PER_WINDOW)
-    expect(statuses(responses)[429]).toBe(burst - MAX_PER_IP_PER_WINDOW)
-    expect(store.entries()).toHaveLength(MAX_PER_IP_PER_WINDOW)
-  })
-
-  it('holds the per-install submission cap under a concurrent burst from many IPs', async () => {
-    await registerOk()
-    const burst = MAX_PER_INSTALL_PER_WINDOW + 6
+  it("holds the per-IP submission cap under a concurrent burst", async () => {
+    await registerOk();
+    const burst = 8;
     const responses = await Promise.all(
-      Array.from({ length: burst }, (_, i) => handleRelayRequest(submit(GOOD), deps({ clientIp: `198.51.100.${i}` }))),
-    )
+      Array.from({ length: burst }, () =>
+        handleRelayRequest(submit(GOOD), deps())
+      )
+    );
+    expect(statuses(responses)[201]).toBe(MAX_PER_IP_PER_WINDOW);
+    expect(statuses(responses)[429]).toBe(burst - MAX_PER_IP_PER_WINDOW);
+    expect(store.entries()).toHaveLength(MAX_PER_IP_PER_WINDOW);
+  });
+
+  it("holds the per-install submission cap under a concurrent burst from many IPs", async () => {
+    await registerOk();
+    const burst = MAX_PER_INSTALL_PER_WINDOW + 6;
+    const responses = await Promise.all(
+      Array.from({ length: burst }, (_, i) =>
+        handleRelayRequest(submit(GOOD), deps({ clientIp: `198.51.100.${i}` }))
+      )
+    );
     // Losers of the compare-and-swap fail closed, so a lockstep burst may
     // admit fewer than the cap; it must never admit more.
-    const accepted = statuses(responses)[201] ?? 0
-    expect(accepted).toBeGreaterThan(0)
-    expect(accepted).toBeLessThanOrEqual(MAX_PER_INSTALL_PER_WINDOW)
-    expect(statuses(responses)[429]).toBe(burst - accepted)
-    expect(store.entries()).toHaveLength(accepted)
-  })
-
-  it('stores a replayed request at most once even when the copies race', async () => {
-    await registerOk()
-    const nonce = 'b'.repeat(32)
+    const accepted = statuses(responses)[201] ?? 0;
+    expect(accepted).toBeGreaterThan(0);
+    expect(accepted).toBeLessThanOrEqual(MAX_PER_INSTALL_PER_WINDOW);
+    expect(statuses(responses)[429]).toBe(burst - accepted);
+    expect(store.entries()).toHaveLength(accepted);
+  });
+
+  it("stores a replayed request at most once even when the copies race", async () => {
+    await registerOk();
+    const nonce = "b".repeat(32);
     const responses = await Promise.all(
-      Array.from({ length: 6 }, (_, i) => handleRelayRequest(submit(GOOD, { nonce }), deps({ clientIp: `198.51.100.${i}` }))),
-    )
-    expect(statuses(responses)[201]).toBe(1)
-    expect(statuses(responses)[401]).toBe(5)
-    expect(store.entries()).toHaveLength(1)
-  })
-
-  it('holds the per-IP and per-day registration caps under a concurrent burst', async () => {
-    const burst = MAX_REGISTRATIONS_PER_IP_PER_WINDOW + 5
-    const responses = await Promise.all(Array.from({ length: burst }, () => handleRelayRequest(register(newHive()), deps())))
-    expect(statuses(responses)[201]).toBe(MAX_REGISTRATIONS_PER_IP_PER_WINDOW)
-    expect([...store.data.keys()].filter((k) => k.startsWith(INSTALL_PREFIX))).toHaveLength(MAX_REGISTRATIONS_PER_IP_PER_WINDOW)
-
-    const dayKey = `${REGISTER_DAY_PREFIX}${new Date(T0).toISOString().slice(0, 10)}`
-    expect((store.data.get(dayKey) as { count: number }).count).toBe(MAX_REGISTRATIONS_PER_IP_PER_WINDOW)
-    store.data.set(dayKey, { count: MAX_REGISTRATIONS_PER_DAY - 1 })
+      Array.from({ length: 6 }, (_, i) =>
+        handleRelayRequest(
+          submit(GOOD, { nonce }),
+          deps({ clientIp: `198.51.100.${i}` })
+        )
+      )
+    );
+    expect(statuses(responses)[201]).toBe(1);
+    expect(statuses(responses)[401]).toBe(5);
+    expect(store.entries()).toHaveLength(1);
+  });
+
+  it("holds the per-IP and per-day registration caps under a concurrent burst", async () => {
+    const burst = MAX_REGISTRATIONS_PER_IP_PER_WINDOW + 5;
+    const responses = await Promise.all(
+      Array.from({ length: burst }, () =>
+        handleRelayRequest(register(newHive()), deps())
+      )
+    );
+    expect(statuses(responses)[201]).toBe(MAX_REGISTRATIONS_PER_IP_PER_WINDOW);
+    expect(
+      [...store.data.keys()].filter(k => k.startsWith(INSTALL_PREFIX))
+    ).toHaveLength(MAX_REGISTRATIONS_PER_IP_PER_WINDOW);
+
+    const dayKey = `${REGISTER_DAY_PREFIX}${new Date(T0).toISOString().slice(0, 10)}`;
+    expect((store.data.get(dayKey) as { count: number }).count).toBe(
+      MAX_REGISTRATIONS_PER_IP_PER_WINDOW
+    );
+    store.data.set(dayKey, { count: MAX_REGISTRATIONS_PER_DAY - 1 });
     const dayBurst = await Promise.all(
-      Array.from({ length: 5 }, (_, i) => handleRelayRequest(register(newHive()), deps({ clientIp: `192.0.2.${i}` }))),
-    )
-    expect(statuses(dayBurst)[201]).toBe(1)
-    expect((store.data.get(dayKey) as { count: number }).count).toBe(MAX_REGISTRATIONS_PER_DAY)
-  })
-
-  it('binds a raced install id to exactly one key', async () => {
-    const a = newHive()
-    const b = { ...newHive(), installId: a.installId }
+      Array.from({ length: 5 }, (_, i) =>
+        handleRelayRequest(
+          register(newHive()),
+          deps({ clientIp: `192.0.2.${i}` })
+        )
+      )
+    );
+    expect(statuses(dayBurst)[201]).toBe(1);
+    expect((store.data.get(dayKey) as { count: number }).count).toBe(
+      MAX_REGISTRATIONS_PER_DAY
+    );
+  });
+
+  it("binds a raced install id to exactly one key", async () => {
+    const a = newHive();
+    const b = { ...newHive(), installId: a.installId };
     const [ra, rb] = await Promise.all([
-      handleRelayRequest(register(a), deps({ clientIp: '198.51.100.1' })),
-      handleRelayRequest(register(b), deps({ clientIp: '198.51.100.2' })),
-    ])
-    expect([ra.status, rb.status].sort()).toEqual([201, 409])
-    const bound = (store.data.get(`${INSTALL_PREFIX}${a.installId}`) as InstallRecord).public_key
-    expect(bound).toBe(ra.status === 201 ? a.publicKey : b.publicKey)
-  })
-
-  it('fails closed when a record stays contended past the retry budget', async () => {
-    await registerOk()
-    let attempts = 0
+      handleRelayRequest(register(a), deps({ clientIp: "198.51.100.1" })),
+      handleRelayRequest(register(b), deps({ clientIp: "198.51.100.2" })),
+    ]);
+    expect([ra.status, rb.status].sort()).toEqual([201, 409]);
+    const bound = (
+      store.data.get(`${INSTALL_PREFIX}${a.installId}`) as InstallRecord
+    ).public_key;
+    expect(bound).toBe(ra.status === 201 ? a.publicKey : b.publicKey);
+  });
+
+  it("fails closed when a record stays contended past the retry budget", async () => {
+    await registerOk();
+    let attempts = 0;
     const contended: RelayStore = {
       ...store,
-      get: (k) => store.get(k),
-      getWithMetadata: (k) => store.getWithMetadata(k),
-      delete: (k) => store.delete(k),
-      list: (o) => store.list(o),
+      get: k => store.get(k),
+      getWithMetadata: k => store.getWithMetadata(k),
+      delete: k => store.delete(k),
+      list: o => store.list(o),
       setJSON: async (k, v, o) => {
         if (k.startsWith(NONCE_PREFIX)) {
-          attempts++
-          return { modified: false }
+          attempts++;
+          return { modified: false };
         }
-        return store.setJSON(k, v, o)
+        return store.setJSON(k, v, o);
       },
-    }
-    const res = await handleRelayRequest(submit(GOOD), deps({ store: contended }))
-    expect(res.status).toBe(429)
-    expect(attempts).toBe(CAS_MAX_ATTEMPTS)
-    expect(store.entries()).toHaveLength(0)
-  })
-})
-
-describe('Netlify function wiring', () => {
-  it('routes exactly the relay paths and reads only the hub secret env var', () => {
-    const fn = readFileSync(path.join(HERE, '..', 'functions', 'nps.mts'), 'utf8')
+    };
+    const res = await handleRelayRequest(
+      submit(GOOD),
+      deps({ store: contended })
+    );
+    expect(res.status).toBe(429);
+    expect(attempts).toBe(CAS_MAX_ATTEMPTS);
+    expect(store.entries()).toHaveLength(0);
+  });
+});
+
+describe("Netlify function wiring", () => {
+  it("routes exactly the relay paths and reads only the hub secret env var", () => {
+    const fn = readFileSync(
+      path.join(HERE, "..", "functions", "nps.mts"),
+      "utf8"
+    );
     for (const p of [RELAY_BASE_PATH, REGISTER_PATH, PENDING_PATH, ACK_PATH]) {
-      expect(fn).toContain(`'${p}'`)
+      expect(fn).toContain(`'${p}'`);
     }
-    expect(fn).toContain('handleRelayRequest')
-    expect(fn).toContain('HUB_SECRET_HASH_ENV')
-    expect(fn).not.toContain('INSTALL_TOKENS')
-  })
-})
+    expect(fn).toContain("handleRelayRequest");
+    expect(fn).toContain("HUB_SECRET_HASH_ENV");
+    expect(fn).not.toContain("INSTALL_TOKENS");
+  });
+});
diff --git a/netlify/nps-relay/relay.ts b/netlify/nps-relay/relay.ts
index aa27922..799cec7 100644
--- a/netlify/nps-relay/relay.ts
+++ b/netlify/nps-relay/relay.ts
@@ -79,254 +79,276 @@
  * and HIVE_NPS_RELAY_URL=https://docs.hivecommons.dev/api/nps.
  */
 
-import { createHash, createPublicKey, randomUUID, timingSafeEqual, verify as cryptoVerify } from 'node:crypto'
+import {
+  createHash,
+  createPublicKey,
+  randomUUID,
+  timingSafeEqual,
+  verify as cryptoVerify,
+} from "node:crypto";
 
 // ── Constants ────────────────────────────────────────────────────────
 
 /** Public route of the submit endpoint; the other routes hang off it. */
-export const RELAY_BASE_PATH = '/api/nps'
-export const REGISTER_PATH = `${RELAY_BASE_PATH}/register`
-export const PENDING_PATH = `${RELAY_BASE_PATH}/pending`
-export const ACK_PATH = `${RELAY_BASE_PATH}/ack`
+export const RELAY_BASE_PATH = "/api/nps";
+export const REGISTER_PATH = `${RELAY_BASE_PATH}/register`;
+export const PENDING_PATH = `${RELAY_BASE_PATH}/pending`;
+export const ACK_PATH = `${RELAY_BASE_PATH}/ack`;
 
 /** Netlify Blobs store holding entries, installs and rate-limit counters. */
-export const STORE_NAME = 'hive-nps-relay'
+export const STORE_NAME = "hive-nps-relay";
 /** Key prefix of stored entries. Keys sort oldest first. */
-export const ENTRY_PREFIX = 'entry/'
+export const ENTRY_PREFIX = "entry/";
 /** Key prefix of registered installs (install id -> public key). */
-export const INSTALL_PREFIX = 'install/'
+export const INSTALL_PREFIX = "install/";
 /** Key prefix of per-install seen-nonce records. */
-export const NONCE_PREFIX = 'nonce/'
+export const NONCE_PREFIX = "nonce/";
 /** Key prefix of per-IP submission rate-limit records (IP is hashed). */
-export const IP_RATE_PREFIX = 'rate/ip/'
+export const IP_RATE_PREFIX = "rate/ip/";
 /** Key prefix of per-install submission rate-limit records. */
-export const INSTALL_RATE_PREFIX = 'rate/install/'
+export const INSTALL_RATE_PREFIX = "rate/install/";
 /** Key prefix of per-IP registration rate-limit records (IP is hashed). */
-export const REGISTER_IP_RATE_PREFIX = 'rate/register-ip/'
+export const REGISTER_IP_RATE_PREFIX = "rate/register-ip/";
 /** Key prefix of the global per-UTC-day registration counters. */
-export const REGISTER_DAY_PREFIX = 'rate/register-day/'
+export const REGISTER_DAY_PREFIX = "rate/register-day/";
 
 /** Env var: sha256 hex of the hub pull secret. The only operator setting. */
-export const HUB_SECRET_HASH_ENV = 'NPS_RELAY_HUB_SECRET_SHA256'
+export const HUB_SECRET_HASH_ENV = "NPS_RELAY_HUB_SECRET_SHA256";
 
 /** Maximum bytes read from a submission body. */
-export const MAX_SUBMIT_BODY_BYTES = 4_096
+export const MAX_SUBMIT_BODY_BYTES = 4_096;
 /** Maximum bytes read from a registration body. */
-export const MAX_REGISTER_BODY_BYTES = 1_024
+export const MAX_REGISTER_BODY_BYTES = 1_024;
 /** Maximum bytes read from an ack body (a full batch of ids fits). */
-export const MAX_ACK_BODY_BYTES = 16_384
+export const MAX_ACK_BODY_BYTES = 16_384;
 /** Maximum feedback length, in characters (code points). */
-export const MAX_FEEDBACK_CHARS = 500
+export const MAX_FEEDBACK_CHARS = 500;
 /** Maximum stored dashboard / hive version length. */
-export const MAX_VERSION_CHARS = 64
+export const MAX_VERSION_CHARS = 64;
 /** Maximum hive id length (matches the hub's name rule). */
-export const MAX_HIVE_ID_CHARS = 100
+export const MAX_HIVE_ID_CHARS = 100;
 /** Valid score range: the 4-point emoji scale. */
-export const SCORE_MIN = 1
-export const SCORE_MAX = 4
+export const SCORE_MIN = 1;
+export const SCORE_MAX = 4;
 
 /** Rolling window: at most this many entries are kept, oldest dropped. */
-export const MAX_ENTRIES = 1_000
+export const MAX_ENTRIES = 1_000;
 /** Most entries one pull returns (and the default). */
-export const MAX_PULL_BATCH = 100
+export const MAX_PULL_BATCH = 100;
 
 /** Rate-limit window for submissions and per-IP registrations. */
-export const RATE_WINDOW_MS = 24 * 60 * 60 * 1000
+export const RATE_WINDOW_MS = 24 * 60 * 60 * 1000;
 /** Submissions accepted per client IP per window. */
-export const MAX_PER_IP_PER_WINDOW = 1
+export const MAX_PER_IP_PER_WINDOW = 1;
 /** Submissions accepted per install per window. */
-export const MAX_PER_INSTALL_PER_WINDOW = 10
+export const MAX_PER_INSTALL_PER_WINDOW = 10;
 /** New registrations accepted per client IP per window. */
-export const MAX_REGISTRATIONS_PER_IP_PER_WINDOW = 3
+export const MAX_REGISTRATIONS_PER_IP_PER_WINDOW = 3;
 /** New registrations accepted in total per UTC day (bounds store growth). */
-export const MAX_REGISTRATIONS_PER_DAY = 500
+export const MAX_REGISTRATIONS_PER_DAY = 500;
 
 /** A signed request's timestamp may be at most this far from the relay clock. */
-export const SIGNATURE_MAX_SKEW_MS = 5 * 60 * 1000
+export const SIGNATURE_MAX_SKEW_MS = 5 * 60 * 1000;
 /**
  * Seen nonces are kept this long. A request is only accepted within
  * SIGNATURE_MAX_SKEW_MS of its timestamp, so a nonce older than twice that can
  * no longer be replayed.
  */
-export const NONCE_RETENTION_MS = 2 * SIGNATURE_MAX_SKEW_MS
+export const NONCE_RETENTION_MS = 2 * SIGNATURE_MAX_SKEW_MS;
 /** Most live nonces kept per install; more signed requests in the window get 429. */
-export const MAX_NONCES_PER_INSTALL = 100
+export const MAX_NONCES_PER_INSTALL = 100;
 /**
  * Attempts made to update one record with a conditional write before giving
  * up. Each retry re-reads the record, so a lost race is re-checked against
  * the winner's write rather than the stale copy.
  */
-export const CAS_MAX_ATTEMPTS = 4
+export const CAS_MAX_ATTEMPTS = 4;
 
 /** Prefix of the signed input; a future format must change it. */
-export const SIGNATURE_VERSION = 'hive-nps-relay-v1'
-export const PURPOSE_REGISTER = 'register'
-export const PURPOSE_SUBMIT = 'submit'
+export const SIGNATURE_VERSION = "hive-nps-relay-v1";
+export const PURPOSE_REGISTER = "register";
+export const PURPOSE_SUBMIT = "submit";
 /** Signed-request headers (Headers.get is case-insensitive). */
-export const HEADER_INSTALL_ID = 'x-hive-install-id'
-export const HEADER_TIMESTAMP = 'x-hive-timestamp'
-export const HEADER_NONCE = 'x-hive-nonce'
-export const HEADER_SIGNATURE = 'x-hive-signature'
+export const HEADER_INSTALL_ID = "x-hive-install-id";
+export const HEADER_TIMESTAMP = "x-hive-timestamp";
+export const HEADER_NONCE = "x-hive-nonce";
+export const HEADER_SIGNATURE = "x-hive-signature";
 /** Error code telling a hive to register (again) before submitting. */
-export const UNKNOWN_INSTALL_CODE = 'unknown_install'
+export const UNKNOWN_INSTALL_CODE = "unknown_install";
 
 /** Raw Ed25519 public key and signature sizes. */
-const ED25519_PUBLIC_KEY_BYTES = 32
-const ED25519_SIGNATURE_BYTES = 64
+const ED25519_PUBLIC_KEY_BYTES = 32;
+const ED25519_SIGNATURE_BYTES = 64;
 /** DER SubjectPublicKeyInfo header for a raw Ed25519 public key (RFC 8410). */
-const ED25519_SPKI_PREFIX = Buffer.from('302a300506032b6570032100', 'hex')
+const ED25519_SPKI_PREFIX = Buffer.from("302a300506032b6570032100", "hex");
 /** Milliseconds per second, for the unix-seconds timestamp header. */
-const MS_PER_SECOND = 1000
+const MS_PER_SECOND = 1000;
 /** Length of the YYYY-MM-DD prefix of an ISO timestamp. */
-const ISO_DATE_LENGTH = 10
+const ISO_DATE_LENGTH = 10;
 
 /** Length of a sha256 hex digest. */
-const SHA256_HEX_LENGTH = 64
+const SHA256_HEX_LENGTH = 64;
 /** Width the millisecond timestamp in an entry id is zero-padded to. */
-const ENTRY_ID_TIME_WIDTH = 13
+const ENTRY_ID_TIME_WIDTH = 13;
 
-const HIVE_ID_PATTERN = /^[A-Za-z0-9._-]+$/
-const SHA256_HEX_PATTERN = /^[0-9a-f]{64}$/
+const HIVE_ID_PATTERN = /^[A-Za-z0-9._-]+$/;
+const SHA256_HEX_PATTERN = /^[0-9a-f]{64}$/;
 /** Install ids are lowercase UUIDs. */
-const INSTALL_ID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/
+const INSTALL_ID_PATTERN =
+  /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/;
 /** Nonces are 16 random bytes, lowercase hex. */
-const NONCE_PATTERN = /^[0-9a-f]{32}$/
+const NONCE_PATTERN = /^[0-9a-f]{32}$/;
 /** Unix seconds; bounded length so parsing can never overflow. */
-const TIMESTAMP_PATTERN = /^[0-9]{1,12}$/
-const BASE64_PATTERN = /^[A-Za-z0-9+/]+={0,2}$/
+const TIMESTAMP_PATTERN = /^[0-9]{1,12}$/;
+const BASE64_PATTERN = /^[A-Za-z0-9+/]+={0,2}$/;
 /** Entry ids are `<zero-padded ms>-<uuid>`; also the hub's accepted id shape. */
-const ENTRY_ID_PATTERN = /^\d{13}-[0-9a-f-]{36}$/
-const VERSION_DISALLOWED = /[^A-Za-z0-9._/-]/g
+const ENTRY_ID_PATTERN = /^\d{13}-[0-9a-f-]{36}$/;
+const VERSION_DISALLOWED = /[^A-Za-z0-9._/-]/g;
 /** Control characters other than newline and tab. */
 // eslint-disable-next-line no-control-regex
-const CONTROL_CHARS = /[\u0000-\u0008\u000b-\u001f\u007f]/g
+const CONTROL_CHARS = /[\u0000-\u0008\u000b-\u001f\u007f]/g;
 
 // ── Types ────────────────────────────────────────────────────────────
 
 /** Conditions a write may carry: update only this version, or create only. */
-export type ConditionalSetOptions = { onlyIfMatch?: string; onlyIfNew?: never } | { onlyIfNew?: boolean; onlyIfMatch?: never }
+export type ConditionalSetOptions =
+  | { onlyIfMatch?: string; onlyIfNew?: never }
+  | { onlyIfNew?: boolean; onlyIfMatch?: never };
 
 /** Result of a (possibly conditional) write. */
 export interface WriteOutcome {
   /** False when the condition was not met and nothing was written. */
-  modified: boolean
-  etag?: string
+  modified: boolean;
+  etag?: string;
 }
 
 /** The subset of the Netlify Blobs store API the relay uses. */
 export interface RelayStore {
-  get(key: string, options: { type: 'json' }): Promise<unknown>
+  get(key: string, options: { type: "json" }): Promise<unknown>;
   /** Like get, also returning the ETag the record can be conditionally updated with. */
-  getWithMetadata(key: string, options: { type: 'json' }): Promise<{ data: unknown; etag?: string } | null>
-  setJSON(key: string, value: unknown, options?: ConditionalSetOptions): Promise<WriteOutcome>
-  delete(key: string): Promise<unknown>
-  list(options: { prefix: string }): Promise<{ blobs: Array<{ key: string }> }>
+  getWithMetadata(
+    key: string,
+    options: { type: "json" }
+  ): Promise<{ data: unknown; etag?: string } | null>;
+  setJSON(
+    key: string,
+    value: unknown,
+    options?: ConditionalSetOptions
+  ): Promise<WriteOutcome>;
+  delete(key: string): Promise<unknown>;
+  list(options: { prefix: string }): Promise<{ blobs: Array<{ key: string }> }>;
 }
 
 export interface RelayEnv {
-  hubSecretHash?: string
+  hubSecretHash?: string;
 }
 
 export interface RelayDeps {
-  store: RelayStore
-  env: RelayEnv
+  store: RelayStore;
+  env: RelayEnv;
   /** Client IP as reported by the platform; undefined when unknown. */
-  clientIp?: string
-  now?: () => number
+  clientIp?: string;
+  now?: () => number;
 }
 
 /** One stored entry, exactly as the hub pull returns it. */
 export interface RelayEntry {
-  id: string
-  install_id: string
-  hive_id: string
-  score: number
-  feedback?: string
-  dashboard_version?: string
-  timestamp: string
+  id: string;
+  install_id: string;
+  hive_id: string;
+  score: number;
+  feedback?: string;
+  dashboard_version?: string;
+  timestamp: string;
 }
 
 /** One registered install. */
 export interface InstallRecord {
-  public_key: string
-  hive_version?: string
-  registered_at: string
+  public_key: string;
+  hive_version?: string;
+  registered_at: string;
 }
 
 interface RateRecord {
-  times: number[]
+  times: number[];
 }
 
 interface DayCounter {
-  count: number
+  count: number;
 }
 
 interface NonceRecord {
-  seen: Array<{ n: string; t: number }>
+  seen: Array<{ n: string; t: number }>;
 }
 
 interface SignedHeaders {
-  installId: string
-  timestamp: string
-  nonce: string
-  signature: string
+  installId: string;
+  timestamp: string;
+  nonce: string;
+  signature: string;
 }
 
 export class BodyTooLargeError extends Error {
   constructor(maxBytes: number) {
-    super(`request body exceeds ${maxBytes} bytes`)
-    this.name = 'BodyTooLargeError'
+    super(`request body exceeds ${maxBytes} bytes`);
+    this.name = "BodyTooLargeError";
   }
 }
 
 // ── Helpers ──────────────────────────────────────────────────────────
 
 const JSON_HEADERS = {
-  'Content-Type': 'application/json',
-  'Cache-Control': 'no-store',
-}
+  "Content-Type": "application/json",
+  "Cache-Control": "no-store",
+};
 
 function json(status: number, body: unknown): Response {
-  return new Response(JSON.stringify(body), { status, headers: JSON_HEADERS })
+  return new Response(JSON.stringify(body), { status, headers: JSON_HEADERS });
 }
 
-const UNAUTHORIZED = (): Response => json(401, { error: 'unauthorized' })
-const RATE_LIMITED = (): Response => json(429, { error: 'rate limit exceeded' })
+const UNAUTHORIZED = (): Response => json(401, { error: "unauthorized" });
+const RATE_LIMITED = (): Response =>
+  json(429, { error: "rate limit exceeded" });
 
 function sha256Hex(value: string | Uint8Array): string {
-  return createHash('sha256').update(value).digest('hex')
+  return createHash("sha256").update(value).digest("hex");
 }
 
 /** Constant-time comparison of two sha256 hex digests. */
 function hashesEqual(a: string, b: string): boolean {
-  if (a.length !== SHA256_HEX_LENGTH || b.length !== SHA256_HEX_LENGTH) return false
-  return timingSafeEqual(Buffer.from(a, 'utf8'), Buffer.from(b, 'utf8'))
+  if (a.length !== SHA256_HEX_LENGTH || b.length !== SHA256_HEX_LENGTH)
+    return false;
+  return timingSafeEqual(Buffer.from(a, "utf8"), Buffer.from(b, "utf8"));
 }
 
 function bearerToken(req: Request): string | null {
-  const auth = req.headers.get('authorization') ?? ''
-  const match = /^Bearer (.+)$/.exec(auth)
-  const token = match?.[1]?.trim()
-  return token ? token : null
+  const auth = req.headers.get("authorization") ?? "";
+  const match = /^Bearer (.+)$/.exec(auth);
+  const token = match?.[1]?.trim();
+  return token ? token : null;
 }
 
 function hubSecretMatches(token: string, rawHash: string | undefined): boolean {
-  const expected = (rawHash ?? '').trim().toLowerCase()
-  if (!SHA256_HEX_PATTERN.test(expected)) return false
-  return hashesEqual(sha256Hex(token), expected)
+  const expected = (rawHash ?? "").trim().toLowerCase();
+  if (!SHA256_HEX_PATTERN.test(expected)) return false;
+  return hashesEqual(sha256Hex(token), expected);
 }
 
 /** Decodes strict base64 of exactly `bytes` bytes, or null. */
 function decodeBase64Exact(value: string, bytes: number): Buffer | null {
-  if (!BASE64_PATTERN.test(value)) return null
-  const decoded = Buffer.from(value, 'base64')
-  if (decoded.length !== bytes || decoded.toString('base64') !== value) return null
-  return decoded
+  if (!BASE64_PATTERN.test(value)) return null;
+  const decoded = Buffer.from(value, "base64");
+  if (decoded.length !== bytes || decoded.toString("base64") !== value)
+    return null;
+  return decoded;
 }
 
 /** Validates a base64 raw Ed25519 public key. */
 export function isValidPublicKey(value: unknown): value is string {
-  return typeof value === 'string' && decodeBase64Exact(value, ED25519_PUBLIC_KEY_BYTES) !== null
+  return (
+    typeof value === "string" &&
+    decodeBase64Exact(value, ED25519_PUBLIC_KEY_BYTES) !== null
+  );
 }
 
 /**
@@ -338,45 +360,63 @@ export function signingInput(
   installId: string,
   timestamp: string,
   nonce: string,
-  body: Uint8Array,
+  body: Uint8Array
 ): Buffer {
-  return Buffer.from([SIGNATURE_VERSION, purpose, installId, timestamp, nonce, sha256Hex(body)].join('\n'), 'utf8')
+  return Buffer.from(
+    [
+      SIGNATURE_VERSION,
+      purpose,
+      installId,
+      timestamp,
+      nonce,
+      sha256Hex(body),
+    ].join("\n"),
+    "utf8"
+  );
 }
 
 /** Verifies an Ed25519 signature; any malformed input is simply false. */
-export function verifyEd25519(publicKeyB64: string, message: Uint8Array, signatureB64: string): boolean {
-  const raw = decodeBase64Exact(publicKeyB64, ED25519_PUBLIC_KEY_BYTES)
-  const sig = decodeBase64Exact(signatureB64, ED25519_SIGNATURE_BYTES)
-  if (!raw || !sig) return false
+export function verifyEd25519(
+  publicKeyB64: string,
+  message: Uint8Array,
+  signatureB64: string
+): boolean {
+  const raw = decodeBase64Exact(publicKeyB64, ED25519_PUBLIC_KEY_BYTES);
+  const sig = decodeBase64Exact(signatureB64, ED25519_SIGNATURE_BYTES);
+  if (!raw || !sig) return false;
   try {
-    const key = createPublicKey({ key: Buffer.concat([ED25519_SPKI_PREFIX, raw]), format: 'der', type: 'spki' })
-    return cryptoVerify(null, message, key, sig)
+    const key = createPublicKey({
+      key: Buffer.concat([ED25519_SPKI_PREFIX, raw]),
+      format: "der",
+      type: "spki",
+    });
+    return cryptoVerify(null, message, key, sig);
   } catch {
-    return false
+    return false;
   }
 }
 
 /** Reads the signed-request headers; null when any is missing or malformed. */
 function readSignedHeaders(req: Request): SignedHeaders | null {
-  const installId = req.headers.get(HEADER_INSTALL_ID) ?? ''
-  const timestamp = req.headers.get(HEADER_TIMESTAMP) ?? ''
-  const nonce = req.headers.get(HEADER_NONCE) ?? ''
-  const signature = req.headers.get(HEADER_SIGNATURE) ?? ''
+  const installId = req.headers.get(HEADER_INSTALL_ID) ?? "";
+  const timestamp = req.headers.get(HEADER_TIMESTAMP) ?? "";
+  const nonce = req.headers.get(HEADER_NONCE) ?? "";
+  const signature = req.headers.get(HEADER_SIGNATURE) ?? "";
   if (
     !INSTALL_ID_PATTERN.test(installId) ||
     !TIMESTAMP_PATTERN.test(timestamp) ||
     !NONCE_PATTERN.test(nonce) ||
     !BASE64_PATTERN.test(signature)
   ) {
-    return null
+    return null;
   }
-  return { installId, timestamp, nonce, signature }
+  return { installId, timestamp, nonce, signature };
 }
 
 /** Whether a signed timestamp (unix seconds) is within the skew window. */
 function timestampFresh(timestamp: string, now: number): boolean {
-  const ms = Number(timestamp) * MS_PER_SECOND
-  return Number.isFinite(ms) && Math.abs(now - ms) <= SIGNATURE_MAX_SKEW_MS
+  const ms = Number(timestamp) * MS_PER_SECOND;
+  return Number.isFinite(ms) && Math.abs(now - ms) <= SIGNATURE_MAX_SKEW_MS;
 }
 
 function verifySigned(
@@ -384,87 +424,106 @@ function verifySigned(
   purpose: string,
   body: Uint8Array,
   publicKey: string,
-  now: number,
+  now: number
 ): boolean {
-  if (!timestampFresh(signed.timestamp, now)) return false
-  const message = signingInput(purpose, signed.installId, signed.timestamp, signed.nonce, body)
-  return verifyEd25519(publicKey, message, signed.signature)
+  if (!timestampFresh(signed.timestamp, now)) return false;
+  const message = signingInput(
+    purpose,
+    signed.installId,
+    signed.timestamp,
+    signed.nonce,
+    body
+  );
+  return verifyEd25519(publicKey, message, signed.signature);
 }
 
 /**
  * Reads a request body, enforcing the cap on bytes actually read. The
  * Content-Length header is never consulted.
  */
-export async function readCappedBytes(req: Request, maxBytes: number): Promise<Uint8Array> {
-  if (!req.body) return new Uint8Array(0)
-  const reader = req.body.getReader()
-  const chunks: Uint8Array[] = []
-  let total = 0
+export async function readCappedBytes(
+  req: Request,
+  maxBytes: number
+): Promise<Uint8Array> {
+  if (!req.body) return new Uint8Array(0);
+  const reader = req.body.getReader();
+  const chunks: Uint8Array[] = [];
+  let total = 0;
   try {
     for (;;) {
-      const { done, value } = await reader.read()
-      if (done) break
-      if (!value) continue
-      total += value.byteLength
+      const { done, value } = await reader.read();
+      if (done) break;
+      if (!value) continue;
+      total += value.byteLength;
       if (total > maxBytes) {
-        await reader.cancel()
-        throw new BodyTooLargeError(maxBytes)
+        await reader.cancel();
+        throw new BodyTooLargeError(maxBytes);
       }
-      chunks.push(value)
+      chunks.push(value);
     }
   } finally {
-    reader.releaseLock()
+    reader.releaseLock();
   }
-  const combined = new Uint8Array(total)
-  let offset = 0
+  const combined = new Uint8Array(total);
+  let offset = 0;
   for (const chunk of chunks) {
-    combined.set(chunk, offset)
-    offset += chunk.byteLength
+    combined.set(chunk, offset);
+    offset += chunk.byteLength;
   }
-  return combined
+  return combined;
 }
 
 /** Text form of readCappedBytes. */
-export async function readCappedText(req: Request, maxBytes: number): Promise<string> {
-  return new TextDecoder().decode(await readCappedBytes(req, maxBytes))
+export async function readCappedText(
+  req: Request,
+  maxBytes: number
+): Promise<string> {
+  return new TextDecoder().decode(await readCappedBytes(req, maxBytes));
 }
 
 /** Parses JSON from already-read bytes; undefined when it is not JSON. */
 function parseJson(bytes: Uint8Array): unknown {
   try {
-    return JSON.parse(new TextDecoder().decode(bytes))
+    return JSON.parse(new TextDecoder().decode(bytes));
   } catch {
-    return undefined
+    return undefined;
   }
 }
 
 /** Reads a capped body, mapping failures to a response. */
-async function readBody(req: Request, maxBytes: number): Promise<Uint8Array | Response> {
+async function readBody(
+  req: Request,
+  maxBytes: number
+): Promise<Uint8Array | Response> {
   try {
-    return await readCappedBytes(req, maxBytes)
+    return await readCappedBytes(req, maxBytes);
   } catch (err) {
-    if (err instanceof BodyTooLargeError) return json(413, { error: 'payload too large' })
-    return json(400, { error: 'unreadable body' })
+    if (err instanceof BodyTooLargeError)
+      return json(413, { error: "payload too large" });
+    return json(400, { error: "unreadable body" });
   }
 }
 
 function newEntryId(now: number): string {
-  return `${String(now).padStart(ENTRY_ID_TIME_WIDTH, '0')}-${randomUUID()}`
+  return `${String(now).padStart(ENTRY_ID_TIME_WIDTH, "0")}-${randomUUID()}`;
 }
 
 async function entryKeysOldestFirst(store: RelayStore): Promise<string[]> {
-  const { blobs } = await store.list({ prefix: ENTRY_PREFIX })
-  return blobs.map((b) => b.key).sort()
+  const { blobs } = await store.list({ prefix: ENTRY_PREFIX });
+  return blobs.map(b => b.key).sort();
 }
 
 /** Timestamps inside the window, from a stored rate record. */
 function liveTimes(rec: unknown, now: number): number[] {
-  const times = rec && Array.isArray((rec as RateRecord).times) ? (rec as RateRecord).times : []
-  return times.filter((t) => typeof t === 'number' && now - t < RATE_WINDOW_MS)
+  const times =
+    rec && Array.isArray((rec as RateRecord).times)
+      ? (rec as RateRecord).times
+      : [];
+  return times.filter(t => typeof t === "number" && now - t < RATE_WINDOW_MS);
 }
 
 /** One compare-and-swap step: the record to write, or the response to stop with. */
-type CasStep = { next: unknown } | { reject: Response }
+type CasStep = { next: unknown } | { reject: Response };
 
 /**
  * Updates one record atomically. `step` sees the current record and decides
@@ -475,16 +534,22 @@ type CasStep = { next: unknown } | { reject: Response }
  * contention fails closed (429) rather than letting a write through
  * unchecked.
  */
-async function compareAndSwap(store: RelayStore, key: string, step: (current: unknown) => CasStep): Promise<Response | null> {
+async function compareAndSwap(
+  store: RelayStore,
+  key: string,
+  step: (current: unknown) => CasStep
+): Promise<Response | null> {
   for (let attempt = 0; attempt < CAS_MAX_ATTEMPTS; attempt++) {
-    const current = await store.getWithMetadata(key, { type: 'json' })
-    const decision = step(current ? current.data : null)
-    if ('reject' in decision) return decision.reject
-    const condition: ConditionalSetOptions = current ? { onlyIfMatch: current.etag } : { onlyIfNew: true }
-    const result = await store.setJSON(key, decision.next, condition)
-    if (result.modified) return null
+    const current = await store.getWithMetadata(key, { type: "json" });
+    const decision = step(current ? current.data : null);
+    if ("reject" in decision) return decision.reject;
+    const condition: ConditionalSetOptions = current
+      ? { onlyIfMatch: current.etag }
+      : { onlyIfNew: true };
+    const result = await store.setJSON(key, decision.next, condition);
+    if (result.modified) return null;
   }
-  return RATE_LIMITED()
+  return RATE_LIMITED();
 }
 
 /**
@@ -492,137 +557,215 @@ async function compareAndSwap(store: RelayStore, key: string, step: (current: un
  * record already holds `max` live timestamps. Check and reservation are one
  * conditional write, so concurrent callers cannot all fit in the last slot.
  */
-function reserveSlot(store: RelayStore, key: string, max: number, now: number): Promise<Response | null> {
-  return compareAndSwap(store, key, (current) => {
-    const times = liveTimes(current, now)
-    if (times.length >= max) return { reject: RATE_LIMITED() }
-    return { next: { times: [...times, now] } satisfies RateRecord }
-  })
+function reserveSlot(
+  store: RelayStore,
+  key: string,
+  max: number,
+  now: number
+): Promise<Response | null> {
+  return compareAndSwap(store, key, current => {
+    const times = liveTimes(current, now);
+    if (times.length >= max) return { reject: RATE_LIMITED() };
+    return { next: { times: [...times, now] } satisfies RateRecord };
+  });
 }
 
 /** Whether a windowed rate record is already at `max`, without reserving. */
-async function atLimit(store: RelayStore, key: string, max: number, now: number): Promise<boolean> {
-  return liveTimes(await store.get(key, { type: 'json' }), now).length >= max
+async function atLimit(
+  store: RelayStore,
+  key: string,
+  max: number,
+  now: number
+): Promise<boolean> {
+  return liveTimes(await store.get(key, { type: "json" }), now).length >= max;
 }
 
-async function getInstall(store: RelayStore, installId: string): Promise<InstallRecord | null> {
-  const rec = (await store.get(`${INSTALL_PREFIX}${installId}`, { type: 'json' })) as InstallRecord | null
-  return rec && typeof rec.public_key === 'string' ? rec : null
+async function getInstall(
+  store: RelayStore,
+  installId: string
+): Promise<InstallRecord | null> {
+  const rec = (await store.get(`${INSTALL_PREFIX}${installId}`, {
+    type: "json",
+  })) as InstallRecord | null;
+  return rec && typeof rec.public_key === "string" ? rec : null;
 }
 
 function ipHash(deps: RelayDeps): string {
-  return sha256Hex(deps.clientIp || 'unknown')
+  return sha256Hex(deps.clientIp || "unknown");
 }
 
 // ── Validation ───────────────────────────────────────────────────────
 
-type Submission = Pick<RelayEntry, 'hive_id' | 'score' | 'feedback' | 'dashboard_version'>
+type Submission = Pick<
+  RelayEntry,
+  "hive_id" | "score" | "feedback" | "dashboard_version"
+>;
 
 function cleanVersion(value: unknown): string | undefined {
-  if (typeof value !== 'string') return undefined
-  return value.replace(VERSION_DISALLOWED, '').slice(0, MAX_VERSION_CHARS) || undefined
+  if (typeof value !== "string") return undefined;
+  return (
+    value.replace(VERSION_DISALLOWED, "").slice(0, MAX_VERSION_CHARS) ||
+    undefined
+  );
 }
 
 /** Validates a submission body; returns the clean fields or an error. */
-export function validateSubmission(body: unknown): { ok: true; value: Submission } | { ok: false; error: string } {
-  if (typeof body !== 'object' || body === null || Array.isArray(body)) {
-    return { ok: false, error: 'body must be a JSON object' }
+export function validateSubmission(
+  body: unknown
+): { ok: true; value: Submission } | { ok: false; error: string } {
+  if (typeof body !== "object" || body === null || Array.isArray(body)) {
+    return { ok: false, error: "body must be a JSON object" };
   }
-  const b = body as Record<string, unknown>
-  const hiveId = b.hive_id
+  const b = body as Record<string, unknown>;
+  const hiveId = b.hive_id;
   if (
-    typeof hiveId !== 'string' ||
+    typeof hiveId !== "string" ||
     hiveId.length === 0 ||
     hiveId.length > MAX_HIVE_ID_CHARS ||
     !HIVE_ID_PATTERN.test(hiveId)
   ) {
-    return { ok: false, error: 'invalid hive_id' }
+    return { ok: false, error: "invalid hive_id" };
   }
-  const score = b.score
-  if (typeof score !== 'number' || !Number.isInteger(score) || score < SCORE_MIN || score > SCORE_MAX) {
-    return { ok: false, error: `score must be an integer ${SCORE_MIN}-${SCORE_MAX}` }
+  const score = b.score;
+  if (
+    typeof score !== "number" ||
+    !Number.isInteger(score) ||
+    score < SCORE_MIN ||
+    score > SCORE_MAX
+  ) {
+    return {
+      ok: false,
+      error: `score must be an integer ${SCORE_MIN}-${SCORE_MAX}`,
+    };
   }
-  let feedback: string | undefined
+  let feedback: string | undefined;
   if (b.feedback !== undefined && b.feedback !== null) {
-    if (typeof b.feedback !== 'string') return { ok: false, error: 'feedback must be a string' }
+    if (typeof b.feedback !== "string")
+      return { ok: false, error: "feedback must be a string" };
     if ([...b.feedback].length > MAX_FEEDBACK_CHARS) {
-      return { ok: false, error: `feedback must be at most ${MAX_FEEDBACK_CHARS} characters` }
+      return {
+        ok: false,
+        error: `feedback must be at most ${MAX_FEEDBACK_CHARS} characters`,
+      };
     }
-    const cleaned = b.feedback.replace(CONTROL_CHARS, '').trim()
-    feedback = cleaned || undefined
+    const cleaned = b.feedback.replace(CONTROL_CHARS, "").trim();
+    feedback = cleaned || undefined;
   }
-  return { ok: true, value: { hive_id: hiveId, score, feedback, dashboard_version: cleanVersion(b.dashboard_version) } }
+  return {
+    ok: true,
+    value: {
+      hive_id: hiveId,
+      score,
+      feedback,
+      dashboard_version: cleanVersion(b.dashboard_version),
+    },
+  };
 }
 
-type Registration = { install_id: string; public_key: string; hive_version?: string }
+type Registration = {
+  install_id: string;
+  public_key: string;
+  hive_version?: string;
+};
 
 /** Validates a registration body. */
-export function validateRegistration(body: unknown): { ok: true; value: Registration } | { ok: false; error: string } {
-  if (typeof body !== 'object' || body === null || Array.isArray(body)) {
-    return { ok: false, error: 'body must be a JSON object' }
+export function validateRegistration(
+  body: unknown
+): { ok: true; value: Registration } | { ok: false; error: string } {
+  if (typeof body !== "object" || body === null || Array.isArray(body)) {
+    return { ok: false, error: "body must be a JSON object" };
   }
-  const b = body as Record<string, unknown>
-  if (typeof b.install_id !== 'string' || !INSTALL_ID_PATTERN.test(b.install_id)) {
-    return { ok: false, error: 'install_id must be a lowercase UUID' }
+  const b = body as Record<string, unknown>;
+  if (
+    typeof b.install_id !== "string" ||
+    !INSTALL_ID_PATTERN.test(b.install_id)
+  ) {
+    return { ok: false, error: "install_id must be a lowercase UUID" };
   }
   if (!isValidPublicKey(b.public_key)) {
-    return { ok: false, error: 'public_key must be a base64 Ed25519 public key' }
+    return {
+      ok: false,
+      error: "public_key must be a base64 Ed25519 public key",
+    };
   }
   return {
     ok: true,
-    value: { install_id: b.install_id, public_key: b.public_key, hive_version: cleanVersion(b.hive_version) },
-  }
+    value: {
+      install_id: b.install_id,
+      public_key: b.public_key,
+      hive_version: cleanVersion(b.hive_version),
+    },
+  };
 }
 
 // ── Handlers ─────────────────────────────────────────────────────────
 
-async function handleRegister(req: Request, deps: RelayDeps, now: number): Promise<Response> {
-  const { store } = deps
-  const bytes = await readBody(req, MAX_REGISTER_BODY_BYTES)
-  if (bytes instanceof Response) return bytes
-  const parsed = validateRegistration(parseJson(bytes))
-  if (!parsed.ok) return json(400, { error: parsed.error })
-  const reg = parsed.value
+async function handleRegister(
+  req: Request,
+  deps: RelayDeps,
+  now: number
+): Promise<Response> {
+  const { store } = deps;
+  const bytes = await readBody(req, MAX_REGISTER_BODY_BYTES);
+  if (bytes instanceof Response) return bytes;
+  const parsed = validateRegistration(parseJson(bytes));
+  if (!parsed.ok) return json(400, { error: parsed.error });
+  const reg = parsed.value;
 
   // Proof of possession: the request must be signed by the key it registers,
   // for the install id it names. Nothing is read or written before this.
-  const signed = readSignedHeaders(req)
-  if (!signed || signed.installId !== reg.install_id) return UNAUTHORIZED()
-  if (!verifySigned(signed, PURPOSE_REGISTER, bytes, reg.public_key, now)) return UNAUTHORIZED()
+  const signed = readSignedHeaders(req);
+  if (!signed || signed.installId !== reg.install_id) return UNAUTHORIZED();
+  if (!verifySigned(signed, PURPOSE_REGISTER, bytes, reg.public_key, now))
+    return UNAUTHORIZED();
 
-  const existing = await getInstall(store, reg.install_id)
+  const existing = await getInstall(store, reg.install_id);
   if (existing) {
-    if (existing.public_key === reg.public_key) return json(200, { ok: true, registered: false })
+    if (existing.public_key === reg.public_key)
+      return json(200, { ok: true, registered: false });
     // No takeover: an install id stays bound to its first key.
-    return json(409, { error: 'install_id is registered to a different key' })
+    return json(409, { error: "install_id is registered to a different key" });
   }
 
   // Reserve the per-IP and per-day slots before creating the install, so a
   // limit that is hit never leaves a registration behind.
-  const ipDenied = await reserveSlot(store, `${REGISTER_IP_RATE_PREFIX}${ipHash(deps)}`, MAX_REGISTRATIONS_PER_IP_PER_WINDOW, now)
-  if (ipDenied) return ipDenied
-  const dayKey = `${REGISTER_DAY_PREFIX}${new Date(now).toISOString().slice(0, ISO_DATE_LENGTH)}`
-  const dayDenied = await compareAndSwap(store, dayKey, (current) => {
-    const count = current && typeof (current as DayCounter).count === 'number' ? (current as DayCounter).count : 0
-    if (count >= MAX_REGISTRATIONS_PER_DAY) return { reject: RATE_LIMITED() }
-    return { next: { count: count + 1 } satisfies DayCounter }
-  })
-  if (dayDenied) return dayDenied
+  const ipDenied = await reserveSlot(
+    store,
+    `${REGISTER_IP_RATE_PREFIX}${ipHash(deps)}`,
+    MAX_REGISTRATIONS_PER_IP_PER_WINDOW,
+    now
+  );
+  if (ipDenied) return ipDenied;
+  const dayKey = `${REGISTER_DAY_PREFIX}${new Date(now).toISOString().slice(0, ISO_DATE_LENGTH)}`;
+  const dayDenied = await compareAndSwap(store, dayKey, current => {
+    const count =
+      current && typeof (current as DayCounter).count === "number"
+        ? (current as DayCounter).count
+        : 0;
+    if (count >= MAX_REGISTRATIONS_PER_DAY) return { reject: RATE_LIMITED() };
+    return { next: { count: count + 1 } satisfies DayCounter };
+  });
+  if (dayDenied) return dayDenied;
 
   const record: InstallRecord = {
     public_key: reg.public_key,
     ...(reg.hive_version ? { hive_version: reg.hive_version } : {}),
     registered_at: new Date(now).toISOString(),
-  }
+  };
   // Create-only: two registrations racing for the same install id cannot both
   // win, so the id is bound to exactly one key — the first write's.
-  const created = await store.setJSON(`${INSTALL_PREFIX}${reg.install_id}`, record, { onlyIfNew: true })
+  const created = await store.setJSON(
+    `${INSTALL_PREFIX}${reg.install_id}`,
+    record,
+    { onlyIfNew: true }
+  );
   if (!created.modified) {
-    const winner = await getInstall(store, reg.install_id)
-    if (winner && winner.public_key === reg.public_key) return json(200, { ok: true, registered: false })
-    return json(409, { error: 'install_id is registered to a different key' })
+    const winner = await getInstall(store, reg.install_id);
+    if (winner && winner.public_key === reg.public_key)
+      return json(200, { ok: true, registered: false });
+    return json(409, { error: "install_id is registered to a different key" });
   }
-  return json(201, { ok: true, registered: true })
+  return json(201, { ok: true, registered: true });
 }
 
 /**
@@ -630,52 +773,78 @@ async function handleRegister(req: Request, deps: RelayDeps, now: number): Promi
  * nonce is fresh, else the response to send. Check and record are one
  * conditional write, so two copies of the same request cannot both pass.
  */
-function consumeNonce(store: RelayStore, installId: string, nonce: string, now: number): Promise<Response | null> {
-  return compareAndSwap(store, `${NONCE_PREFIX}${installId}`, (current) => {
-    const rec = current as NonceRecord | null
+function consumeNonce(
+  store: RelayStore,
+  installId: string,
+  nonce: string,
+  now: number
+): Promise<Response | null> {
+  return compareAndSwap(store, `${NONCE_PREFIX}${installId}`, current => {
+    const rec = current as NonceRecord | null;
     const live = (rec && Array.isArray(rec.seen) ? rec.seen : []).filter(
-      (s) => s && typeof s.n === 'string' && typeof s.t === 'number' && now - s.t < NONCE_RETENTION_MS,
-    )
-    if (live.some((s) => s.n === nonce)) return { reject: json(401, { error: 'replayed request' }) }
-    if (live.length >= MAX_NONCES_PER_INSTALL) return { reject: RATE_LIMITED() }
-    return { next: { seen: [...live, { n: nonce, t: now }] } satisfies NonceRecord }
-  })
-}
-
-async function handleSubmit(req: Request, deps: RelayDeps, now: number): Promise<Response> {
-  const { store } = deps
-  const bytes = await readBody(req, MAX_SUBMIT_BODY_BYTES)
-  if (bytes instanceof Response) return bytes
+      s =>
+        s &&
+        typeof s.n === "string" &&
+        typeof s.t === "number" &&
+        now - s.t < NONCE_RETENTION_MS
+    );
+    if (live.some(s => s.n === nonce))
+      return { reject: json(401, { error: "replayed request" }) };
+    if (live.length >= MAX_NONCES_PER_INSTALL)
+      return { reject: RATE_LIMITED() };
+    return {
+      next: { seen: [...live, { n: nonce, t: now }] } satisfies NonceRecord,
+    };
+  });
+}
+
+async function handleSubmit(
+  req: Request,
+  deps: RelayDeps,
+  now: number
+): Promise<Response> {
+  const { store } = deps;
+  const bytes = await readBody(req, MAX_SUBMIT_BODY_BYTES);
+  if (bytes instanceof Response) return bytes;
 
   // Authenticate before writing anything, so an unauthenticated caller cannot
   // make the relay store anything (not even rate-limit records).
-  const signed = readSignedHeaders(req)
-  if (!signed || !timestampFresh(signed.timestamp, now)) return UNAUTHORIZED()
-  const install = await getInstall(store, signed.installId)
-  if (!install) return json(401, { error: 'unknown install', code: UNKNOWN_INSTALL_CODE })
-  if (!verifySigned(signed, PURPOSE_SUBMIT, bytes, install.public_key, now)) return UNAUTHORIZED()
-  const replay = await consumeNonce(store, signed.installId, signed.nonce, now)
-  if (replay) return replay
+  const signed = readSignedHeaders(req);
+  if (!signed || !timestampFresh(signed.timestamp, now)) return UNAUTHORIZED();
+  const install = await getInstall(store, signed.installId);
+  if (!install)
+    return json(401, { error: "unknown install", code: UNKNOWN_INSTALL_CODE });
+  if (!verifySigned(signed, PURPOSE_SUBMIT, bytes, install.public_key, now))
+    return UNAUTHORIZED();
+  const replay = await consumeNonce(store, signed.installId, signed.nonce, now);
+  if (replay) return replay;
 
   // Cheap pre-checks keep today's response order (429 before 400) without
   // reserving anything; the reservations below are what actually bound.
-  const ipKey = `${IP_RATE_PREFIX}${ipHash(deps)}`
-  if (await atLimit(store, ipKey, MAX_PER_IP_PER_WINDOW, now)) return RATE_LIMITED()
+  const ipKey = `${IP_RATE_PREFIX}${ipHash(deps)}`;
+  if (await atLimit(store, ipKey, MAX_PER_IP_PER_WINDOW, now))
+    return RATE_LIMITED();
 
-  const body = parseJson(bytes)
-  if (body === undefined) return json(400, { error: 'invalid JSON body' })
-  const parsed = validateSubmission(body)
-  if (!parsed.ok) return json(400, { error: parsed.error })
+  const body = parseJson(bytes);
+  if (body === undefined) return json(400, { error: "invalid JSON body" });
+  const parsed = validateSubmission(body);
+  if (!parsed.ok) return json(400, { error: parsed.error });
 
-  const installKey = `${INSTALL_RATE_PREFIX}${signed.installId}`
-  if (await atLimit(store, installKey, MAX_PER_INSTALL_PER_WINDOW, now)) return RATE_LIMITED()
+  const installKey = `${INSTALL_RATE_PREFIX}${signed.installId}`;
+  if (await atLimit(store, installKey, MAX_PER_INSTALL_PER_WINDOW, now))
+    return RATE_LIMITED();
 
   // Reserve both slots atomically before storing the entry, so concurrent
   // submissions cannot all squeeze into the same remaining slot.
-  const ipDenied = await reserveSlot(store, ipKey, MAX_PER_IP_PER_WINDOW, now)
-  if (ipDenied) return ipDenied
-  const installDenied = await reserveSlot(store, installKey, MAX_PER_INSTALL_PER_WINDOW, now)
-  if (installDenied) return installDenied
+  const ipDenied = await reserveSlot(store, ipKey, MAX_PER_IP_PER_WINDOW, now);
+  if (ipDenied) return ipDenied;
+  const installDenied = await reserveSlot(
+    store,
+    installKey,
+    MAX_PER_INSTALL_PER_WINDOW,
+    now
+  );
+  if (installDenied) return installDenied;
 
   const entry: RelayEntry = {
     id: newEntryId(now),
@@ -683,84 +852,113 @@ async function handleSubmit(req: Request, deps: RelayDeps, now: number): Promise
     hive_id: parsed.value.hive_id,
     score: parsed.value.score,
     ...(parsed.value.feedback ? { feedback: parsed.value.feedback } : {}),
-    ...(parsed.value.dashboard_version ? { dashboard_version: parsed.value.dashboard_version } : {}),
+    ...(parsed.value.dashboard_version
+      ? { dashboard_version: parsed.value.dashboard_version }
+      : {}),
     timestamp: new Date(now).toISOString(),
-  }
-  await store.setJSON(`${ENTRY_PREFIX}${entry.id}`, entry)
+  };
+  await store.setJSON(`${ENTRY_PREFIX}${entry.id}`, entry);
 
   // Rolling window: drop the oldest entries beyond the cap.
-  const keys = await entryKeysOldestFirst(store)
-  const overflow = keys.length - MAX_ENTRIES
+  const keys = await entryKeysOldestFirst(store);
+  const overflow = keys.length - MAX_ENTRIES;
   if (overflow > 0) {
-    await Promise.allSettled(keys.slice(0, overflow).map((key) => store.delete(key)))
+    await Promise.allSettled(
+      keys.slice(0, overflow).map(key => store.delete(key))
+    );
   }
-  return json(201, { ok: true })
+  return json(201, { ok: true });
 }
 
 function hubAuthorized(req: Request, env: RelayEnv): Response | null {
-  if (!SHA256_HEX_PATTERN.test((env.hubSecretHash ?? '').trim().toLowerCase())) {
-    return json(503, { error: 'relay pull is not configured' })
+  if (
+    !SHA256_HEX_PATTERN.test((env.hubSecretHash ?? "").trim().toLowerCase())
+  ) {
+    return json(503, { error: "relay pull is not configured" });
   }
-  const token = bearerToken(req)
-  if (!token || !hubSecretMatches(token, env.hubSecretHash)) return UNAUTHORIZED()
-  return null
+  const token = bearerToken(req);
+  if (!token || !hubSecretMatches(token, env.hubSecretHash))
+    return UNAUTHORIZED();
+  return null;
 }
 
 async function handlePending(req: Request, deps: RelayDeps): Promise<Response> {
-  const denied = hubAuthorized(req, deps.env)
-  if (denied) return denied
-  const requested = Number.parseInt(new URL(req.url).searchParams.get('limit') ?? '', 10)
-  const limit = Number.isInteger(requested) && requested > 0 ? Math.min(requested, MAX_PULL_BATCH) : MAX_PULL_BATCH
-  const keys = (await entryKeysOldestFirst(deps.store)).slice(0, limit)
-  const entries: RelayEntry[] = []
+  const denied = hubAuthorized(req, deps.env);
+  if (denied) return denied;
+  const requested = Number.parseInt(
+    new URL(req.url).searchParams.get("limit") ?? "",
+    10
+  );
+  const limit =
+    Number.isInteger(requested) && requested > 0
+      ? Math.min(requested, MAX_PULL_BATCH)
+      : MAX_PULL_BATCH;
+  const keys = (await entryKeysOldestFirst(deps.store)).slice(0, limit);
+  const entries: RelayEntry[] = [];
   for (const key of keys) {
-    const entry = (await deps.store.get(key, { type: 'json' })) as RelayEntry | null
-    if (entry) entries.push(entry)
+    const entry = (await deps.store.get(key, {
+      type: "json",
+    })) as RelayEntry | null;
+    if (entry) entries.push(entry);
   }
-  return json(200, { entries })
+  return json(200, { entries });
 }
 
 async function handleAck(req: Request, deps: RelayDeps): Promise<Response> {
-  const denied = hubAuthorized(req, deps.env)
-  if (denied) return denied
-  const bytes = await readBody(req, MAX_ACK_BODY_BYTES)
-  if (bytes instanceof Response) return bytes
-  const body = parseJson(bytes)
-  if (body === undefined) return json(400, { error: 'invalid JSON body' })
-  const ids = (body as { ids?: unknown } | null)?.ids
+  const denied = hubAuthorized(req, deps.env);
+  if (denied) return denied;
+  const bytes = await readBody(req, MAX_ACK_BODY_BYTES);
+  if (bytes instanceof Response) return bytes;
+  const body = parseJson(bytes);
+  if (body === undefined) return json(400, { error: "invalid JSON body" });
+  const ids = (body as { ids?: unknown } | null)?.ids;
   if (!Array.isArray(ids) || ids.length > MAX_PULL_BATCH) {
-    return json(400, { error: `ids must be an array of at most ${MAX_PULL_BATCH} entry ids` })
+    return json(400, {
+      error: `ids must be an array of at most ${MAX_PULL_BATCH} entry ids`,
+    });
   }
-  const valid = ids.filter((id): id is string => typeof id === 'string' && ENTRY_ID_PATTERN.test(id))
-  await Promise.all(valid.map((id) => deps.store.delete(`${ENTRY_PREFIX}${id}`)))
-  return json(200, { deleted: valid.length })
+  const valid = ids.filter(
+    (id): id is string => typeof id === "string" && ENTRY_ID_PATTERN.test(id)
+  );
+  await Promise.all(valid.map(id => deps.store.delete(`${ENTRY_PREFIX}${id}`)));
+  return json(200, { deleted: valid.length });
 }
 
 /** Routes one request. The Netlify function is a thin wrapper around this. */
-export async function handleRelayRequest(req: Request, deps: RelayDeps): Promise<Response> {
-  const now = (deps.now ?? Date.now)()
-  const path = new URL(req.url).pathname.replace(/\/+$/, '')
+export async function handleRelayRequest(
+  req: Request,
+  deps: RelayDeps
+): Promise<Response> {
+  const now = (deps.now ?? Date.now)();
+  const path = new URL(req.url).pathname.replace(/\/+$/, "");
   try {
     if (path === RELAY_BASE_PATH) {
-      if (req.method !== 'POST') return json(405, { error: 'method not allowed' })
-      return await handleSubmit(req, deps, now)
+      if (req.method !== "POST")
+        return json(405, { error: "method not allowed" });
+      return await handleSubmit(req, deps, now);
     }
     if (path === REGISTER_PATH) {
-      if (req.method !== 'POST') return json(405, { error: 'method not allowed' })
-      return await handleRegister(req, deps, now)
+      if (req.method !== "POST")
+        return json(405, { error: "method not allowed" });
+      return await handleRegister(req, deps, now);
     }
     if (path === PENDING_PATH) {
-      if (req.method !== 'GET') return json(405, { error: 'method not allowed' })
-      return await handlePending(req, deps)
+      if (req.method !== "GET")
+        return json(405, { error: "method not allowed" });
+      return await handlePending(req, deps);
     }
     if (path === ACK_PATH) {
-      if (req.method !== 'POST') return json(405, { error: 'method not allowed' })
-      return await handleAck(req, deps)
+      if (req.method !== "POST")
+        return json(405, { error: "method not allowed" });
+      return await handleAck(req, deps);
     }
-    return json(404, { error: 'not found' })
+    return json(404, { error: "not found" });
   } catch (err) {
     // Never echo request data (signatures and secrets live in headers) into logs.
-    console.error('nps relay: internal error:', err instanceof Error ? err.name : 'unknown')
-    return json(500, { error: 'internal server error' })
+    console.error(
+      "nps relay: internal error:",
+      err instanceof Error ? err.name : "unknown"
+    );
+    return json(500, { error: "internal server error" });
   }
 }
diff --git a/public/403.html b/public/403.html
index 235a164..c1493ec 100644
--- a/public/403.html
+++ b/public/403.html
@@ -1,88 +1,228 @@
-<!DOCTYPE html>
+<!doctype html>
 <html lang="en">
-<head>
-<meta charset="utf-8" />
-<meta name="viewport" content="width=device-width, initial-scale=1" />
-<meta name="robots" content="noindex" />
-<title>Access denied (403) &middot; Hive Commons</title>
-<!--
+  <head>
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <meta name="robots" content="noindex" />
+    <title>Access denied (403) &middot; Hive Commons</title>
+    <!--
   Fully self-contained error page: all CSS is inlined and the logo is an
   inline SVG, so this page renders correctly even when hashed asset bundles
   are unavailable (e.g. mid-deploy propagation windows). Do not add external
   stylesheets, fonts, scripts, or images to this file.
 -->
-<style>
-  :root {
-    --bg: #14110b; --bg-2: #1b170f; --bg-3: #221c11;
-    --ink: #efe7d7; --ink-2: #b9ad93; --ink-3: #7d7460;
-    --honey: #e0a33a; --honey-deep: #b8791a; --honey-ink: #14110b;
-    --line: #332c1e; --focus: #e0a33a; --radius: .5rem;
-    --font-wordmark: Georgia, "Times New Roman", serif;
-    color-scheme: dark;
-  }
-  @media (prefers-color-scheme: light) {
-    :root {
-      --bg: #f6efe0; --bg-2: #efe6d2; --bg-3: #e8ddc4;
-      --ink: #1c1710; --ink-2: #5a5040; --ink-3: #8a7f68;
-      --honey: #b8791a; --honey-deep: #8f5c10; --honey-ink: #fff8e8;
-      --line: #d8cbae; color-scheme: light;
-    }
-  }
-  * { box-sizing: border-box; margin: 0; padding: 0; }
-  html, body { height: 100%; }
-  body {
-    font-family: "IBM Plex Sans", -apple-system, BlinkMacSystemFont, "Segoe UI", Helvetica, Arial, sans-serif;
-    background: var(--bg); color: var(--ink); display: flex; flex-direction: column; min-height: 100vh;
-    background-image: radial-gradient(900px 520px at 78% 10%, color-mix(in srgb, var(--honey) 10%, transparent) 0%, transparent 62%);
-  }
-  body::before {
-    content: ""; position: fixed; inset: 0; pointer-events: none; opacity: .7;
-    background-image: url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' width='56' height='97' viewBox='0 0 56 97'%3E%3Cpath d='M28 1l27 15.5v31L28 63 1 47.5v-31zM28 34l27 15.5v31L28 96 1 80.5v-31z' fill='none' stroke='%23e0a33a' stroke-opacity='.07'/%3E%3C/svg%3E");
-    mask-image: radial-gradient(70% 80% at 70% 40%, #000 20%, transparent 100%);
-  }
-  a:focus-visible { outline: 2px solid var(--focus); outline-offset: 3px; border-radius: 2px; }
-  header { padding: 1.25rem 1.5rem; border-bottom: 1px solid var(--line); background: color-mix(in srgb, var(--bg) 86%, transparent); backdrop-filter: blur(8px); }
-  .brand { display: inline-flex; align-items: center; gap: .6rem; text-decoration: none; color: var(--ink); font-family: var(--font-wordmark); font-weight: 600; font-size: 1.05rem; letter-spacing: -.01em; }
-  .brand img { display: block; width: 28px; height: 28px; }
-  main { flex: 1; display: flex; align-items: center; justify-content: center; padding: 3rem 1.5rem; text-align: center; }
-  .wrap { max-width: 44rem; }
-  .code { font-size: clamp(4.5rem, 16vw, 8rem); font-weight: 600; line-height: 1; color: var(--honey); margin-bottom: 1.25rem; letter-spacing: -.03em; }
-  h1 { font-size: clamp(1.4rem, 4vw, 2rem); font-weight: 600; letter-spacing: -.01em; margin-bottom: .9rem; }
-  p.lede { color: var(--ink-2); font-size: 1.05rem; line-height: 1.6; margin-bottom: 2.25rem; }
-  .actions { display: flex; flex-wrap: wrap; gap: .75rem; justify-content: center; }
-  .btn { display: inline-block; padding: .7rem 1.2rem; border-radius: var(--radius); font-size: .95rem; font-weight: 500; text-decoration: none; border: 1px solid var(--line); color: var(--ink); background: transparent; transition: border-color .15s ease, color .15s ease, background-color .15s ease; }
-  .btn:hover { border-color: var(--honey-deep); color: var(--honey); }
-  .btn.primary { background: var(--honey); border-color: var(--honey); color: var(--honey-ink); }
-  .btn.primary:hover { background: var(--honey-deep); border-color: var(--honey-deep); color: var(--honey-ink); }
-  footer { padding: 1.25rem 1.5rem; text-align: center; color: var(--ink-3); font-size: .85rem; border-top: 1px solid var(--line); }
-  footer a { color: var(--ink-3); }
-</style>
-</head>
-<body>
-  <header>
-    <a class="brand" href="/">
-      <img src="data:image/png;base64,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" width="28" height="28" alt="Hive Commons" style="display:block;width:28px;height:28px;border-radius:50%;" />
-      <span>Hive Commons</span>
-    </a>
-  </header>
-  <main>
-    <div class="wrap">
-      <div class="code">403</div>
-      <h1>You don&rsquo;t have access to this page</h1>
-      <p class="lede">
-        Access to this page is restricted (HTTP 403). If you believe you
-        should have access, please reach out to the Hive Commons maintainers.
-        In the meantime, the documentation and main site are open to everyone.
-      </p>
-      <div class="actions">
-        <a class="btn primary" href="/docs">Browse the docs</a>
-        <a class="btn" href="/">Hive Commons home</a>
-        <a class="btn" href="https://github.com/hivecommons" rel="noopener">GitHub</a>
+    <style>
+      :root {
+        --bg: #14110b;
+        --bg-2: #1b170f;
+        --bg-3: #221c11;
+        --ink: #efe7d7;
+        --ink-2: #b9ad93;
+        --ink-3: #7d7460;
+        --honey: #e0a33a;
+        --honey-deep: #b8791a;
+        --honey-ink: #14110b;
+        --line: #332c1e;
+        --focus: #e0a33a;
+        --radius: 0.5rem;
+        --font-wordmark: Georgia, "Times New Roman", serif;
+        color-scheme: dark;
+      }
+      @media (prefers-color-scheme: light) {
+        :root {
+          --bg: #f6efe0;
+          --bg-2: #efe6d2;
+          --bg-3: #e8ddc4;
+          --ink: #1c1710;
+          --ink-2: #5a5040;
+          --ink-3: #8a7f68;
+          --honey: #b8791a;
+          --honey-deep: #8f5c10;
+          --honey-ink: #fff8e8;
+          --line: #d8cbae;
+          color-scheme: light;
+        }
+      }
+      * {
+        box-sizing: border-box;
+        margin: 0;
+        padding: 0;
+      }
+      html,
+      body {
+        height: 100%;
+      }
+      body {
+        font-family:
+          "IBM Plex Sans",
+          -apple-system,
+          BlinkMacSystemFont,
+          "Segoe UI",
+          Helvetica,
+          Arial,
+          sans-serif;
+        background: var(--bg);
+        color: var(--ink);
+        display: flex;
+        flex-direction: column;
+        min-height: 100vh;
+        background-image: radial-gradient(
+          900px 520px at 78% 10%,
+          color-mix(in srgb, var(--honey) 10%, transparent) 0%,
+          transparent 62%
+        );
+      }
+      body::before {
+        content: "";
+        position: fixed;
+        inset: 0;
+        pointer-events: none;
+        opacity: 0.7;
+        background-image: url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' width='56' height='97' viewBox='0 0 56 97'%3E%3Cpath d='M28 1l27 15.5v31L28 63 1 47.5v-31zM28 34l27 15.5v31L28 96 1 80.5v-31z' fill='none' stroke='%23e0a33a' stroke-opacity='.07'/%3E%3C/svg%3E");
+        mask-image: radial-gradient(
+          70% 80% at 70% 40%,
+          #000 20%,
+          transparent 100%
+        );
+      }
+      a:focus-visible {
+        outline: 2px solid var(--focus);
+        outline-offset: 3px;
+        border-radius: 2px;
+      }
+      header {
+        padding: 1.25rem 1.5rem;
+        border-bottom: 1px solid var(--line);
+        background: color-mix(in srgb, var(--bg) 86%, transparent);
+        backdrop-filter: blur(8px);
+      }
+      .brand {
+        display: inline-flex;
+        align-items: center;
+        gap: 0.6rem;
+        text-decoration: none;
+        color: var(--ink);
+        font-family: var(--font-wordmark);
+        font-weight: 600;
+        font-size: 1.05rem;
+        letter-spacing: -0.01em;
+      }
+      .brand img {
+        display: block;
+        width: 28px;
+        height: 28px;
+      }
+      main {
+        flex: 1;
+        display: flex;
+        align-items: center;
+        justify-content: center;
+        padding: 3rem 1.5rem;
+        text-align: center;
+      }
+      .wrap {
+        max-width: 44rem;
+      }
+      .code {
+        font-size: clamp(4.5rem, 16vw, 8rem);
+        font-weight: 600;
+        line-height: 1;
+        color: var(--honey);
+        margin-bottom: 1.25rem;
+        letter-spacing: -0.03em;
+      }
+      h1 {
+        font-size: clamp(1.4rem, 4vw, 2rem);
+        font-weight: 600;
+        letter-spacing: -0.01em;
+        margin-bottom: 0.9rem;
+      }
+      p.lede {
+        color: var(--ink-2);
+        font-size: 1.05rem;
+        line-height: 1.6;
+        margin-bottom: 2.25rem;
+      }
+      .actions {
+        display: flex;
+        flex-wrap: wrap;
+        gap: 0.75rem;
+        justify-content: center;
+      }
+      .btn {
+        display: inline-block;
+        padding: 0.7rem 1.2rem;
+        border-radius: var(--radius);
+        font-size: 0.95rem;
+        font-weight: 500;
+        text-decoration: none;
+        border: 1px solid var(--line);
+        color: var(--ink);
+        background: transparent;
+        transition:
+          border-color 0.15s ease,
+          color 0.15s ease,
+          background-color 0.15s ease;
+      }
+      .btn:hover {
+        border-color: var(--honey-deep);
+        color: var(--honey);
+      }
+      .btn.primary {
+        background: var(--honey);
+        border-color: var(--honey);
+        color: var(--honey-ink);
+      }
+      .btn.primary:hover {
+        background: var(--honey-deep);
+        border-color: var(--honey-deep);
+        color: var(--honey-ink);
+      }
+      footer {
+        padding: 1.25rem 1.5rem;
+        text-align: center;
+        color: var(--ink-3);
+        font-size: 0.85rem;
+        border-top: 1px solid var(--line);
+      }
+      footer a {
+        color: var(--ink-3);
+      }
+    </style>
+  </head>
+  <body>
+    <header>
+      <a class="brand" href="/">
+        <img
+          src="data:image/png;base64,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"
+          width="28"
+          height="28"
+          alt="Hive Commons"
+          style="display: block; width: 28px; height: 28px; border-radius: 50%"
+        />
+        <span>Hive Commons</span>
+      </a>
+    </header>
+    <main>
+      <div class="wrap">
+        <div class="code">403</div>
+        <h1>You don&rsquo;t have access to this page</h1>
+        <p class="lede">
+          Access to this page is restricted (HTTP 403). If you believe you
+          should have access, please reach out to the Hive Commons maintainers.
+          In the meantime, the documentation and main site are open to everyone.
+        </p>
+        <div class="actions">
+          <a class="btn primary" href="/docs">Browse the docs</a>
+          <a class="btn" href="/">Hive Commons home</a>
+          <a class="btn" href="https://github.com/hivecommons" rel="noopener"
+            >GitHub</a
+          >
+        </div>
       </div>
-    </div>
-  </main>
-  <footer>
-    Hive Commons &mdash; multi-cluster configuration management for Kubernetes
-  </footer>
-</body>
+    </main>
+    <footer>
+      Hive Commons &mdash; multi-cluster configuration management for Kubernetes
+    </footer>
+  </body>
 </html>
diff --git a/public/404.html b/public/404.html
index b1a419b..c51f290 100644
--- a/public/404.html
+++ b/public/404.html
@@ -1,88 +1,228 @@
-<!DOCTYPE html>
+<!doctype html>
 <html lang="en">
-<head>
-<meta charset="utf-8" />
-<meta name="viewport" content="width=device-width, initial-scale=1" />
-<meta name="robots" content="noindex" />
-<title>Page not found (404) &middot; Hive Commons</title>
-<!--
+  <head>
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <meta name="robots" content="noindex" />
+    <title>Page not found (404) &middot; Hive Commons</title>
+    <!--
   Fully self-contained error page: all CSS is inlined and the logo is an
   inline SVG, so this page renders correctly even when hashed asset bundles
   are unavailable (e.g. mid-deploy propagation windows). Do not add external
   stylesheets, fonts, scripts, or images to this file.
 -->
-<style>
-  :root {
-    --bg: #14110b; --bg-2: #1b170f; --bg-3: #221c11;
-    --ink: #efe7d7; --ink-2: #b9ad93; --ink-3: #7d7460;
-    --honey: #e0a33a; --honey-deep: #b8791a; --honey-ink: #14110b;
-    --line: #332c1e; --focus: #e0a33a; --radius: .5rem;
-    --font-wordmark: Georgia, "Times New Roman", serif;
-    color-scheme: dark;
-  }
-  @media (prefers-color-scheme: light) {
-    :root {
-      --bg: #f6efe0; --bg-2: #efe6d2; --bg-3: #e8ddc4;
-      --ink: #1c1710; --ink-2: #5a5040; --ink-3: #8a7f68;
-      --honey: #b8791a; --honey-deep: #8f5c10; --honey-ink: #fff8e8;
-      --line: #d8cbae; color-scheme: light;
-    }
-  }
-  * { box-sizing: border-box; margin: 0; padding: 0; }
-  html, body { height: 100%; }
-  body {
-    font-family: "IBM Plex Sans", -apple-system, BlinkMacSystemFont, "Segoe UI", Helvetica, Arial, sans-serif;
-    background: var(--bg); color: var(--ink); display: flex; flex-direction: column; min-height: 100vh;
-    background-image: radial-gradient(900px 520px at 78% 10%, color-mix(in srgb, var(--honey) 10%, transparent) 0%, transparent 62%);
-  }
-  body::before {
-    content: ""; position: fixed; inset: 0; pointer-events: none; opacity: .7;
-    background-image: url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' width='56' height='97' viewBox='0 0 56 97'%3E%3Cpath d='M28 1l27 15.5v31L28 63 1 47.5v-31zM28 34l27 15.5v31L28 96 1 80.5v-31z' fill='none' stroke='%23e0a33a' stroke-opacity='.07'/%3E%3C/svg%3E");
-    mask-image: radial-gradient(70% 80% at 70% 40%, #000 20%, transparent 100%);
-  }
-  a:focus-visible { outline: 2px solid var(--focus); outline-offset: 3px; border-radius: 2px; }
-  header { padding: 1.25rem 1.5rem; border-bottom: 1px solid var(--line); background: color-mix(in srgb, var(--bg) 86%, transparent); backdrop-filter: blur(8px); }
-  .brand { display: inline-flex; align-items: center; gap: .6rem; text-decoration: none; color: var(--ink); font-family: var(--font-wordmark); font-weight: 600; font-size: 1.05rem; letter-spacing: -.01em; }
-  .brand img { display: block; width: 28px; height: 28px; }
-  main { flex: 1; display: flex; align-items: center; justify-content: center; padding: 3rem 1.5rem; text-align: center; }
-  .wrap { max-width: 44rem; }
-  .code { font-size: clamp(4.5rem, 16vw, 8rem); font-weight: 600; line-height: 1; color: var(--honey); margin-bottom: 1.25rem; letter-spacing: -.03em; }
-  h1 { font-size: clamp(1.4rem, 4vw, 2rem); font-weight: 600; letter-spacing: -.01em; margin-bottom: .9rem; }
-  p.lede { color: var(--ink-2); font-size: 1.05rem; line-height: 1.6; margin-bottom: 2.25rem; }
-  .actions { display: flex; flex-wrap: wrap; gap: .75rem; justify-content: center; }
-  .btn { display: inline-block; padding: .7rem 1.2rem; border-radius: var(--radius); font-size: .95rem; font-weight: 500; text-decoration: none; border: 1px solid var(--line); color: var(--ink); background: transparent; transition: border-color .15s ease, color .15s ease, background-color .15s ease; }
-  .btn:hover { border-color: var(--honey-deep); color: var(--honey); }
-  .btn.primary { background: var(--honey); border-color: var(--honey); color: var(--honey-ink); }
-  .btn.primary:hover { background: var(--honey-deep); border-color: var(--honey-deep); color: var(--honey-ink); }
-  footer { padding: 1.25rem 1.5rem; text-align: center; color: var(--ink-3); font-size: .85rem; border-top: 1px solid var(--line); }
-  footer a { color: var(--ink-3); }
-</style>
-</head>
-<body>
-  <header>
-    <a class="brand" href="/">
-      <img src="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAEAAAABACAYAAACqaXHeAAAdhUlEQVR42t2beXRfV3XvP/ucc+9vlGQNliVLsS3HeIgz4AwOISGNyxCgoRTy4vLoFKAtbVf7WlpW2/dKCZTV9vW18CgtKYT3mNquNHHplBAoSWyTOc7gkNixHY/yJNuyJGv8Tfec/f649yeJhCQ2Ky1rvd9aZ13p6nevznefPXz33ucIr9HnFr3FAOaT8slk/v1ffOx3+8tdhZVxKXdhnIv6fKXRky8UeqRAeaByYe2KmctOjzI29IjbeipM1nfkfX7Pf1v9gX3A7HvuVLWwiY2yMQDKa/hxrw3wT/BJkQCEG265objyl666Ki5G15vIXmOMWRXFriNyMRaHtIPB0qBGS76dZe3tFGllAZ1Id4CqVL4y+a+HbFW2+YnGvcdeGNy8UWQIQES4IwS7UcS/VgKQH/ZBVRXASDaZX9v+sbWl3rabXSG6MdeaH4jJEfAkwRMaXgUCCoLBqpUaddbq67nevlGHwhm+zbeIREzeFKQYFylTJiKiNl0dtxX5ztToxFd/ZtU7vwWoiHDHHXfYjRs3+h+JAFTVNoH/+hOfXl84z33UFaOfKraUo0QbNCpJAA0oRgRJF08wpEOw1KlzoV7CO+wbOBbGuVu/jZFAHGJ1WHUSaV5iSnHJttt2RBU/mWwbPzn2l/9l5XW3p9NQCwQR+aHNwpzrqjfBf/Wuu/oODp354gUrL380t2jBTWIL0fRUPalNEzQ4oxo5JTJBIwka4UNzOEKw+GARtRgBFSWowQdLHaSuYhqqtqreTlYremp6xI9XpkPcWlzf/7rlf7/59HMP/N1Dd28QES8ieuedd9r/cB+gqkZSO/d7Dxz4udLCnj/rLRd6k3Grk2eqviRFg1in6KyXku9TNUEBDwgOT0LdhFQACtM+kBMBsahCAIKSWo0EqyScnjwTCiannZ2d16y4tG3zfQe3/9XHP3XLH2zcuHFyvla+5hpwZ/ry8MUvfrE4Ojz8f88fGPh6XCz0Dk+TDMhiyWuHnfJBgnfgc6iPUR8T5g3vHcFHBB8zmXgkKdPLInxdaQtlrjDrEF9mqpHQ8ELiDQ0v1D3UfKDqA1UJpqLBjkyP+SmqoWvZ+b/x2T++9eF//vfNl4mI36LqXnMf0JTsg/c+uGT1ZWs3dbW3rx9tkCQeay0iCkPJNI/Wd7OrMYiXOrFEoM14pQgCItS1gaphwPZxXX4ty10biaazEOCUr/BEfR/7k6MonoLJEWFwOGLryONwwRCZmA7p4DzTlSwpFdypiZnp55979kM/cc1Vd5yrJsjZgH/g0acuXrn2dXe1t7QsqdRJTvuKe7p2lIGog9fFnQjQCPBCY4TvVnZxLBnGCkRYEEjU09BAt+3g6vxqrij0IsDWmYNMaYVrCufTanKzan84GeeJygGO+WFiMRRNjBHBYOiQNlZGfSyN28kLDDeqftI27AJiju7Z/1tvumTtX56LEF5WAHfeeafduHGj/+etj1y0ft3F9y1qLXWfrPrkqepR99jMfsbCJHmJWRv3c01pOT1RCQEmQ+B7leM8WtnPqB9HEVpNicvzy7imNMACK+ysjbFlai+HGidRoMu2clVhgHXFfnJiUIW6wr76aZ6uDjLqJ2k1JS7M97Mm180Caxn3CQfro5wJ00Sq2hqXtSvfYXY9+b2PvvvKyz99tkKQV3J4n7/99vPe8/YbHu1YUO577MxJ/1Bl0B6ujxKLwYklaKCmCS2mwBXFJbyh1E+7iwkKo0mdR2YGSYLypvIy+uKYw/UqWyYPsKN6nIYm5I3DICTq8QpL4g6uKS1jVaGLplufDJ7d1REWRy0MxAVmgrKnOsLB2giJJJRNTN5E5NRqS64QWqKSfWLzA7/8gbe//UtnIwR5GYIjd912W37dje/b6tsLV/zz0G6/t3baKp5YHJrxUcm8u8dTC4HFUSvXtQ6wttiFIDQUWm2qFQ+OH+Xx6SNM+hlyxmEwKTPKPLFBqKvHimFNvoerW/vpjctUQqAghtjAC5Vxnps5wWgyQ944CtYR48gbS8FG5DDali+pq3u/9a5v3fDbP/dz35kXvc5OAFu2bHEbNmxIntl/7Cunl3Te/I0DTyQJ3uXEIcjspGUeKc+YDo2QEBBWFbp4W8cAC6OY/ZVJvjm6n1ONSWKxWDGo6qwA5wSZvkMyjcibiKta+nlD22Ig8PD4CXbOnMQZpUhMZAyRWGJjyRlL3liKNiKnErpa283M8OmhL3/mz67+8v++9aD3Xl6OLJkXh7sNGzYkj+/Y9f5FA4tv/reDu5LEG5fTAj5EJN4SvCN4l4W1uZ+TxGI0T6Q5np0c5Uh1kpIz7Jwa48jMNAUtQohJEjv77Pyr9w6fWHxiiUKOSqLsmhnDClSCsnNqjJAI4nPUvFBPJA2TSTqqCVQagTpiRibGfefi/t73/PyH/iaEEL2Sr3MvUv3w13ff3bOwr/8vk0Bw3hn1MUkwZ52CCeA0ZXkCOCJsyJN4R1B9VVtsXoManItntcOGmMQrDTVYSXMKjAEjGE2fNAqiilhrT42OJcsvuOj6Wzd945dF5PN3qv7AJGo+cTAi4ncMHv1Uz4Jy17Fpn2gSOW0kqJhzykFDCBg1CBC8EOoOdQ59BQG8mD16DfjYphxChUZiSLxFjEUEvDFIEIwVJAiiUM+EYVUxwZuZeqIXXbH+49e/+93fvAkGVfUlpuCaIc8Y4/fs2PH6xYsW3jyV4AGr3iI+AjnHnCko0hRAsOAdiEs576sRL1Ia7EMgeIshfSwkFp84rDV4ETCS+h01qe8IAlaaSoGLMOOT037J0v7uX/7I7/6OiPxGljz5l/iAm266SVWVhb2LPlbOxc57VARR79Dk3AeJQzSld+qF8EM8r4lDvZ2Vvfcm9RHe4hODTwyJNySZL2h4Q5IYksTSCIZGIjQ85sxEVVdfsPYXbnzf+y42xvjM1OcE0AwTzz316JpCseUnKx4VglUUDfYlkwvZmP/7S/7mHSImFYAaSCI0sa8IOswf3qE+QkIqAEUJPgWfJA4f5hymTxy+0RQKeC94D0kQglqZnqmHvoVtLTd/8FdubtYwXmwCBghJy5IP5fO5qA6JaYgjCJWaEBoOa4WgP9hmeUk4hFojEDxYoNEQqjVLUSwazrKeZaDeCFTrglVA07motxAkNQERjBFCNhRDUCEIqDGoN3iBBiK1gJ5/waqbFi1a9DlgcH4INyIm+cinP134xJbyTV94Ak5PBVOwUHaGdV0t+OCYqRnwFrxFX2aItyQNy3TVsKSlyKJcjK/CJR0lzm8tMVU1NBqv/A68JSSWqYqhPcpzWXcLmigt1rC+uwXRiJlquvLqLcGnQAkmc4QGCRYTDCGkGWUucqZRD9rbs6j/t37vY28REQ2q5vuiz41/sfPNtc41903PSFjSquYdVypvXS7kELadrnL/4DQHR+tpgmMF1fkSTBOYWqK05i3XLily3Xkl8gaGZzyLy47pJPDdozM8dLTCyHRCbMGaOa1qGmXNK7EzXNqT561LSywpO05VPQahs2DYNVrngaMVDozWcCKUI0NkhdgIsYW8E2IrOBHaCpaBBRG9pQiC9+15Zx5+/Ol/efMbLvsZVa03KbIDKJQ63tFeFK3HhNMdifnchGfbYcNPd1re1J1nbXuOh49X2TpY4dSEJ2cFa1LvXPWKtcKlPTHXLy+yqs0xXAn8674Znh1ucHlvjh9fkuc9y8tc2l1g8+AM247VqFSUfJTWy2o+ZYarFsa8daDAhZ0xIrDjdJ1vH6iAwluXF7hkYcz5rTHPDNd4/FiVkSmPjQwmFowKPgFrhSULYla0R7RFBq/KaENN1SAdPb1X9nZ2Lt0osjd1LoooyK9/ZfSx+kD7+hMtlTBREOMVqgm0WXhXu+GnOhz9ecPgdOC7h6s8drjORCXgrLC8y7FhWY7LemJCUB44XGfLoSonJz1GwCv0t1p+bFmeN/bHFJywczTh/gNVnh2q4wMs7Uj/fnlPTGskHBhP2HKoxvbjdeqJIgI5Z7isL+bHluZY2moZqynPnKyz82SdWgNKOcPSdsvqrojugsUKTCaB09OeSjVQiJwaqfPZP/rYT3/1rz/zT6oaRETlltvu6T904VU7xha2tk3WqtoIRpDUM3qgGmB5Tnhvh+VtCywtkbBjNOGBwToD7Zar+2NKTtg5nPDve2vsPOkxQDSvSldP62CsWuh48/KYdb0Or8rmwTrjNWXD0phFecOpSuDBwQYPHaozOhPIOcGmIR8jkCh0lQzr+2PW9zs6C4ah6cCO4QY9JcvyBZbICLWgnJgM6SIEKDkh7/BdHZH9l9tv/5Pf+MD7/0hVExHxbmhF36qZjlxbtVrXRFPwZGTEACUDh+vKZ4YStkx43tdpuahkef+aArkYTk0r/7i3wbYjDSp1yLuUXOo8uhFnoWL3cWXvyRqXnZfwthUR1/bn8Jqu8HcPN7hvb8LgqCcyhryxqIdm4LJGKRioV+Gh/QkHRwJXLHGs6bRcuTgiMunET0x7jowFpqpK3kLsUjIdNOAc9C7uXw0UtsIUgGsU2tbWbY5qox5UsC8OdQrEGSHfPq18bybh4z3wthbHzlHP/9lW5/SkkrOGvAUNL09zc5kDfXR/4IWTdX736hylvPD15+o8cShgUQrOgkIIYAWcpJNyCAYlNhA7mJ4Rtuz2sFx4/SLDSF05MBoYmVCsQCFq5gzpQooiPoGOjoVLgdbbP/zhaQBXVTmvZkxWrX1lnl4yMBVS0ZkcjJ2G0QlD0aUeXf2r01yAgoVqTQkGqqLsPiE4tUQOQvYOKykQC0QIVgQnpAMl7wSvkHjI54QTJwKDw7Agb4itZj2IOdYjkhKkXKHUCbRt3rz5JICbqjW6q+HsKL7PXmgFgoARweII/twadqqpSmd5DrGxzIQUvIrOTtwKRE3QIkQGnCiRkVnNECfUTWpGeSvYzIoNMpfCiAIi3oOLXLl9YXvrvn370maNzxd7fJpGnlXGk2WeadKioJqhONcRMj6hEEJ6T7LOUQpWiMTgjMFZQ2QNkTHE2TUyQmRMRpWzdFgMFknbUQKSvTPVBSF4iHP5wtKl5xcAE0IQJ1FcVj23JpnJRKHNJfzhO4yopmVzI6nHF4HIKM6AMxAZMrAQWU1Jj4HYCiGAEUU1qxlIEyoZbJ1neqmZWudcqdg6WyRxDl+bk+LZVTxktmuj59xenF8Ga05OBGwG2EoTvBDZ1OG5DHzK+tIQ6wSCTZuPgWakmK2RzCUmaMZcUykFH0KtNj27jo6ZmWHTBkmawL7qylvS5ETnTd5IGjbPVgAGkMwHBEkB5izEVrFGMsDgbKYBLl355v30bykwk2WLTSHKvEVqzlE1jU7GQL1Wqx47fDgBxBijLhJOWDNvN8IP+Nhs4tUAOQMFo9RVMc3nAkRZvUNfBbwINBqZICWbnaReOnZpQSMy81c9VffIpAJxJgUfGaHhQSXMgkTBmHkJxnzNFtRYpFarzwwNDVWzMiAmsu5kNdGXbRLYbMW8woVF4ff7HBeXDNUAq7uE910e6GxTZpL0O5IZ4Xx/l3XGUmbpobtDec86pZBXCk644UJY3KUEScHHUTay5Cay4FymEVYREYKB3i5lUSvUEyjEEMVKI2T/NyNzzUUJpAtWq1UngOmOFSvSesBb7Niu5+JuHq5iRCAvczbafLgnJ7xzgWVDm6ErEsa9svsULC7DO18nXNKnbDmgPHJAmJwR8tGcCprMX9Q8lAvKhuXKm88XFhXg4KTiFa5eYljdrTx5THn+uNCop+Ajy5w5ZEJUEdpalOVdSm859fYzXukpC+155cgZGJ+RWZVv2rUgahyMjpw8DlRWd3frI/v24da7xu7rF9Rq1y0o5W4/WWdfLWV+iUKrgZ9ot7yz3bIkJ3iB50fh3r3Cc0NCe0H5sfPhTcuE918Ily1W7nkBnjuexvTYChUPzimXLVHeugJWdgjTDdg6CI8cMqCwfqly6WLhrefDBd3Ks0NwZDQtdEYu5QMKFIvK8k6lvy3l90mAk1NwfMKwsAR9rbCmG0YqyrFxqFRTk50tLSscP3pkEKj29V2ZwCPY02NjE5e95R3/9bqFpa43liWUrciROlxUFH6tJ+Kd7Zb2SDhagW/uhX96Dg6NphObqsOOU7BnNFXRCxYKV/bBojZltAZjNVjVq/zUhXDDSqGzIDw3DHftgW2HDT4IinBkTDg6AcbCea3C6zqFjhalrlBpCFGsLOtULu6FvpaUJ4zVYN8IHB411OrCWEU4U00d4cKi0FkCsUrNp1zFWUQ1yL/e/rV/2L7t0e+tXXve1PPPP+/dpk2b6u0f/Ytt60qdK9+dk/DB7shc0xLocEJHBCN1eHxIuf+AMDQu5BzkC6laW5v6iP2jcPCM8uQQvPN1cHWfsKJT2XcmcEGnsCASDo7DQ0fguROpepZy4Iym4c7AeEV48CAcPqNcuEhZ0iIsLsOB8UDeKf2ltMo8XYdjU8qxcaGRpM82Gd94RZioKSfLsLQNlrYKXQXl5LTXXM5J/czwxH33fGNvRmr9rN/7wJadP7tr8Zq/XeBr/iM9zl5dcNREeWES/u0F2DuS0s7YzjmW72trSbM4Aq05uG6Z8pY+KETKRBC2HYfHjwnTdSjHEGex2s4SnfRes8iSc8qSdljdAeU48+MqHJ9WBseFmVqaF4j5flJh5po85GNY3AI9ZRDvQ0vBmm1PPLNtw/pLf33FihWH9u3bNzz7zGXDB+9bNjUydW27s6vyokGVhiqbXoCdo0I+DzYHiYVgQR0EN3f1FkIEhTzUgLsPCkcmoWwNW4/APQeFBGgtpt7dOYjjOW8fRWBdOvI5cFYYHE/NpZ4J9pnTsHPYMF0XjIVgsmUU8KJ4IBHFi2IteBWGJoV9ZxSfGFwQHnnowceAib516yqzVeGshXzie4PH/v3iHvdewI801HkFNZDLZaD17DhyLGn+7y0kTqkplPJQiLKGxbw470TTpMZkqW92tVlBRrN7Uw3h1LRg7WzfBRVN84dmoye7WoGQkabYgveoyxlz9OTo9Fdvu+1RoDZ14EDtJa2x4sTwl7zvuRFrmlQfzYrB9hUEIDQrNorLJo8IYtKJOpuusIvmQEYmBd4Eb7KMr0ljRbK6glWMZu1zq3MtHWlahX4fdzHz/rexacbprIY4xu54/plH9+7euX9gYKDy1FNPNWYFICJBVUWuu+7+kW9845mOzs5LVMUHsJqpu5ofzPCa4NNVk1mAQvZMSCeeqrpgMqIzf9Wbq92ksSKabZ3L2uUZF/HzWN0PmovJKkIiqSk5o1ijxLGY0YlK+Lsv3XY3MNnS0jL1YnqvW7dutXz3u8nw6ZP/synfoJratnvp0KzVZ6J02GyFXZxeo6jJ0VPtcbEQZfedS0No5NKfrVWsU8SmwpKsCKhGMiFkOYMRvEm5SMh+D9n30j5h6hStTd/pLFjR0NFm5Hvbn9m26Y47nmzv7Z159tlnKy/JbDds2JCoqvnDP/zEPx4dGtpWjLGq6jUD++Ih80HPB94EF6fJSUo/hXge6MiBdYq1irFpSd3YVG2xkmpO2usgmDStTbvBqRY0gacdoHRg58A7p0RGiYxqqWCZHJlKbv3zP/37KIrGu1tbx3hR3jbbIdm0aZNs2rTJHxoc/J3xqYqKs1o3QAQapV5e5wG3cXMoLtZUCDmIc2AjSXd/kpKRKIYoUpzTbIVS0NYIYklHM4cw2Qq/qNSgTcDNv5m51LIJPsrAx06IDGFBGfP4ls333PfNu57s6uqa2LNnz/TL7hDZuHGjV1X7pquueujI0aO3tka49rwmU2nHCuc0VdlIv0/to0iInMyGtOBSjx/blE4XHRgHYgXnBNM0nfnATRppQpZ5eQv1zCm6jLLUm8lVWiFFMuCmmTk6TQsmTohEQ3ubsYdfODz0iY98+GulUmkKOM0PyNrNSzr7quYfv/yl/3706InnP7rcuJu6vI/jQMUKNgPssrjdtPc4SkGqVZYXlfcuDPTFIF64qk24ui1QiJTEpt8zGYgmjwg2VWO1UDMQjLKyFFjXkqp9yUF/IZBYpZEJTTJTdK6ZNit5I+SMajlnSCZnwm1/8Sd/deLYicFSqTQ8NDRUOdtdYkZEwqZ77ln3xjde/UB7W2tx75Tn2xPGbK+mbracFSujzIsHYKFVriop64opS9tTCZz2hgvy0OlgzCu7KjDYMDSyUvv8Lm2SeftFLrAmB4ujtNIzlEBBoNMqB+vwfFWYCEJOIDZKJEqMUDBQFKXo8O1FY+/84le+/nu/8sEvLFy48NTw8PAgL1PykFfaIfqd+7duXHfVG+6I45xPEm9210Xun4ZDiRBnYa9FlEvzypUF6HLC8QZsr8IRn9bgFlhlZaysjoSigaFE2V2HIT9LN/AK7UZZHStLI4hFGPawq6YMNgw5UVblYE0ujU7763C4kTrCoklT+KJAjuAXlq3dfPd37v/gu67/4/b29uGxsbEDwMw57xRVVSciydNPP/2bay+55LMzwXj13iQisr0K22rCYqu8sQBLImEqwDM12FkX6kDepvV7UcGjdAqsiWFZBBblYAN2NoSgyoCD8yMoG2EiwAsNZW9DqOhcUyYodBu4IIbFDmaCcrgBkyrkjJILwS9ucXb7Q49ve+91V38iVy6fyBlzYGxsbOKVjtmc1V7hZ55++qMXXXzxn9et1ama11iMmfBK2aU1+N0N2N6AUYUcaWLTLEY3mxteUxA9VlnjoN/CSBJAoNMaagoHEng+gTOaNkNcc7O1CC6jupFCn4XlFhZYGGl4HVPCkpKzzz36xOPvuu6aTzWcG8oZc3hqamqUVylXnvVu8QceeOCX1r3+9Z8vt7RE45Xg1Rt7yioPJnA8m3Aua2o0y9MmY2az+1KyPcBGYECU15PS1VMi7EjgpKYxP8q+awQM6Ttd5jdyaWSmIEoXGnqtlVyMbP7Ovfe95+1v+0wURSdzudyRqampEc6iVvuq5wVExKuqvfbaa7/0nXvv/cnR0dNH2wrGGoc/5L0eQChaoZDFd5vtHbBZmGtKwmdkJnLp/f2kGWKC8HACJ42klWEBTEqUrFEik1Z18pbU0RkoG6Vo1NuiNaMzU2z68t9+7T1vf9ufRlF0IpfLHT5b8Gd9YKIphBtvvPHbt9762Wuf3bvvmy6HLRScFATvBJUskTFmjtRkW3nSn7P7zSKpM4qPlIZJuX/OaJoHGJ1th0WSCiRvUidXRMlrCOXI0JO3duLQ4aP/6+N/8LFf/MWf/2Kpvf1UuVw+cDZq/0Mfmpq3+9psvm/zr86sXvs/Bvu6F3sPNPA2JXZm/lvlxR5otmqtXC+KCcK9qngjszu2UpXXVO2BGNVcUC1YZzpjqIxPN555cOs3f/+DH/i7E8PDhxYuPO/M8PCRIaByrucKz+nQlIj4W265xagqP/6WH//8137/d67hiac+lx8ZGW/NY6McRk26zxENarKGxdzQTBMUK3NtK2ska4elcT0nSg7VPCEU0NAWW+kpOJOrVcKux5946I8+/Eu/ffO7bvizE8PDe7q7u48ODx85nIU6/c88Nzi7F/9XP/Shi1f97M/+QmnFqvfGPb3LjIM6kCSA4kVD0yLQtAuKUWFDdkTkYVGMFbVpuoETMaXISEvm8CZPjkwe373rkX/58pe+dcfXv/4UcKa3t3cCOJ0xPP1PPzjZ3GC9CUxzE/Ili9qWvftTn3lz97qL35Hv6Vtv21rPi1vSkyR+fqsKMAGuyzz9kyYFms8Ah7qndnpkfHzo2O49jz322D/8zRce27nz2f3AZHtv70x3a+tYltgE+BGdHH0ZQTTP9haXxvGS63/zNy9afPnlF7f29q4pdHQsc4Vip3GuHOcLBeecW9vwoV6pVfcktRkatYmZ4ZFjo0cPD77w1JMvPHDXXXv37t17DBgHagMDA5WWlpapLJ8P8CM+OvsykhAF2QSycW6DtQOKQAvQtry3t7V76dJC3NIS1aan5dTQUGPo4MFqFaYzJ1bNeLvvXbmyvrK3tzo1NVWbX8Z6LT/Cf9RHBA1BNoHZCbJp40bz/Pbtwr59sw3ieVc6Vqygp68vLF+1KhTGxpILLrgg+eQnPxn4/+0jIs0juJLt3/+RTuj/AQIWTx2aKUjEAAAAAElFTkSuQmCC" width="28" height="28" alt="Hive Commons" style="display:block;width:28px;height:28px;border-radius:50%;" />
-      <span>Hive Commons</span>
-    </a>
-  </header>
-  <main>
-    <div class="wrap">
-      <div class="code">404</div>
-      <h1>Page not found</h1>
-      <p class="lede">
-        Sorry, the page you are looking for does not exist or may have moved.
-        Try the documentation, or use the search on any docs page to find what
-        you need.
-      </p>
-      <div class="actions">
-        <a class="btn primary" href="/docs">Browse the docs</a>
-        <a class="btn" href="/">Hive Commons home</a>
-        <a class="btn" href="https://github.com/hivecommons" rel="noopener">GitHub</a>
+    <style>
+      :root {
+        --bg: #14110b;
+        --bg-2: #1b170f;
+        --bg-3: #221c11;
+        --ink: #efe7d7;
+        --ink-2: #b9ad93;
+        --ink-3: #7d7460;
+        --honey: #e0a33a;
+        --honey-deep: #b8791a;
+        --honey-ink: #14110b;
+        --line: #332c1e;
+        --focus: #e0a33a;
+        --radius: 0.5rem;
+        --font-wordmark: Georgia, "Times New Roman", serif;
+        color-scheme: dark;
+      }
+      @media (prefers-color-scheme: light) {
+        :root {
+          --bg: #f6efe0;
+          --bg-2: #efe6d2;
+          --bg-3: #e8ddc4;
+          --ink: #1c1710;
+          --ink-2: #5a5040;
+          --ink-3: #8a7f68;
+          --honey: #b8791a;
+          --honey-deep: #8f5c10;
+          --honey-ink: #fff8e8;
+          --line: #d8cbae;
+          color-scheme: light;
+        }
+      }
+      * {
+        box-sizing: border-box;
+        margin: 0;
+        padding: 0;
+      }
+      html,
+      body {
+        height: 100%;
+      }
+      body {
+        font-family:
+          "IBM Plex Sans",
+          -apple-system,
+          BlinkMacSystemFont,
+          "Segoe UI",
+          Helvetica,
+          Arial,
+          sans-serif;
+        background: var(--bg);
+        color: var(--ink);
+        display: flex;
+        flex-direction: column;
+        min-height: 100vh;
+        background-image: radial-gradient(
+          900px 520px at 78% 10%,
+          color-mix(in srgb, var(--honey) 10%, transparent) 0%,
+          transparent 62%
+        );
+      }
+      body::before {
+        content: "";
+        position: fixed;
+        inset: 0;
+        pointer-events: none;
+        opacity: 0.7;
+        background-image: url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' width='56' height='97' viewBox='0 0 56 97'%3E%3Cpath d='M28 1l27 15.5v31L28 63 1 47.5v-31zM28 34l27 15.5v31L28 96 1 80.5v-31z' fill='none' stroke='%23e0a33a' stroke-opacity='.07'/%3E%3C/svg%3E");
+        mask-image: radial-gradient(
+          70% 80% at 70% 40%,
+          #000 20%,
+          transparent 100%
+        );
+      }
+      a:focus-visible {
+        outline: 2px solid var(--focus);
+        outline-offset: 3px;
+        border-radius: 2px;
+      }
+      header {
+        padding: 1.25rem 1.5rem;
+        border-bottom: 1px solid var(--line);
+        background: color-mix(in srgb, var(--bg) 86%, transparent);
+        backdrop-filter: blur(8px);
+      }
+      .brand {
+        display: inline-flex;
+        align-items: center;
+        gap: 0.6rem;
+        text-decoration: none;
+        color: var(--ink);
+        font-family: var(--font-wordmark);
+        font-weight: 600;
+        font-size: 1.05rem;
+        letter-spacing: -0.01em;
+      }
+      .brand img {
+        display: block;
+        width: 28px;
+        height: 28px;
+      }
+      main {
+        flex: 1;
+        display: flex;
+        align-items: center;
+        justify-content: center;
+        padding: 3rem 1.5rem;
+        text-align: center;
+      }
+      .wrap {
+        max-width: 44rem;
+      }
+      .code {
+        font-size: clamp(4.5rem, 16vw, 8rem);
+        font-weight: 600;
+        line-height: 1;
+        color: var(--honey);
+        margin-bottom: 1.25rem;
+        letter-spacing: -0.03em;
+      }
+      h1 {
+        font-size: clamp(1.4rem, 4vw, 2rem);
+        font-weight: 600;
+        letter-spacing: -0.01em;
+        margin-bottom: 0.9rem;
+      }
+      p.lede {
+        color: var(--ink-2);
+        font-size: 1.05rem;
+        line-height: 1.6;
+        margin-bottom: 2.25rem;
+      }
+      .actions {
+        display: flex;
+        flex-wrap: wrap;
+        gap: 0.75rem;
+        justify-content: center;
+      }
+      .btn {
+        display: inline-block;
+        padding: 0.7rem 1.2rem;
+        border-radius: var(--radius);
+        font-size: 0.95rem;
+        font-weight: 500;
+        text-decoration: none;
+        border: 1px solid var(--line);
+        color: var(--ink);
+        background: transparent;
+        transition:
+          border-color 0.15s ease,
+          color 0.15s ease,
+          background-color 0.15s ease;
+      }
+      .btn:hover {
+        border-color: var(--honey-deep);
+        color: var(--honey);
+      }
+      .btn.primary {
+        background: var(--honey);
+        border-color: var(--honey);
+        color: var(--honey-ink);
+      }
+      .btn.primary:hover {
+        background: var(--honey-deep);
+        border-color: var(--honey-deep);
+        color: var(--honey-ink);
+      }
+      footer {
+        padding: 1.25rem 1.5rem;
+        text-align: center;
+        color: var(--ink-3);
+        font-size: 0.85rem;
+        border-top: 1px solid var(--line);
+      }
+      footer a {
+        color: var(--ink-3);
+      }
+    </style>
+  </head>
+  <body>
+    <header>
+      <a class="brand" href="/">
+        <img
+          src="data:image/png;base64,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"
+          width="28"
+          height="28"
+          alt="Hive Commons"
+          style="display: block; width: 28px; height: 28px; border-radius: 50%"
+        />
+        <span>Hive Commons</span>
+      </a>
+    </header>
+    <main>
+      <div class="wrap">
+        <div class="code">404</div>
+        <h1>Page not found</h1>
+        <p class="lede">
+          Sorry, the page you are looking for does not exist or may have moved.
+          Try the documentation, or use the search on any docs page to find what
+          you need.
+        </p>
+        <div class="actions">
+          <a class="btn primary" href="/docs">Browse the docs</a>
+          <a class="btn" href="/">Hive Commons home</a>
+          <a class="btn" href="https://github.com/hivecommons" rel="noopener"
+            >GitHub</a
+          >
+        </div>
       </div>
-    </div>
-  </main>
-  <footer>
-    Hive Commons &mdash; multi-cluster configuration management for Kubernetes
-  </footer>
-</body>
+    </main>
+    <footer>
+      Hive Commons &mdash; multi-cluster configuration management for Kubernetes
+    </footer>
+  </body>
 </html>
diff --git a/runbooks/README.md b/runbooks/README.md
index 342370d..b4737a9 100644
--- a/runbooks/README.md
+++ b/runbooks/README.md
@@ -2,6 +2,6 @@
 
 Start here when the docs site (docs.hivecommons.dev) is broken after a deploy.
 
-| Symptom | Runbook |
-| --- | --- |
+| Symptom                                                                               | Runbook                              |
+| ------------------------------------------------------------------------------------- | ------------------------------------ |
 | A deploy shipped broken pages, missing content, or a failed build is blocking updates | [site-rollback.md](site-rollback.md) |
diff --git a/scripts/check-internal-links-helpers.test.ts b/scripts/check-internal-links-helpers.test.ts
index e0a8b2c..12f8955 100644
--- a/scripts/check-internal-links-helpers.test.ts
+++ b/scripts/check-internal-links-helpers.test.ts
@@ -160,8 +160,8 @@ describe("parseNavStructures", () => {
     const entries = parseNavStructures(src);
     // One per section + one bare = 2 rows
     expect(entries).toHaveLength(2);
-    const sectionRow = entries.find((e) => e.sectionSlug === "overview");
-    const bareRow = entries.find((e) => e.sectionSlug === "");
+    const sectionRow = entries.find(e => e.sectionSlug === "overview");
+    const bareRow = entries.find(e => e.sectionSlug === "");
     expect(sectionRow).toEqual<NavAliasEntry>({
       navName: "HIVE",
       base: "docs/hive",
@@ -190,7 +190,7 @@ describe("parseNavStructures", () => {
 ]
     `;
     const slugs = parseNavStructures(src)
-      .map((e) => e.slug)
+      .map(e => e.slug)
       .sort();
     expect(slugs).toEqual(["deploy", "deploy", "rollback", "rollback"]);
   });
@@ -205,10 +205,10 @@ describe("parseNavStructures", () => {
         ] },
 ]
     `;
-    const files = parseNavStructures(src).map((e) => e.file);
+    const files = parseNavStructures(src).map(e => e.file);
     expect(files).not.toContain("https://example.com/x.md");
     expect(files).not.toContain("/other/place.md");
-    expect(files.filter((f) => f === "real.md")).toHaveLength(2); // section + bare
+    expect(files.filter(f => f === "real.md")).toHaveLength(2); // section + bare
   });
 
   it("supports .mdx entries", () => {
@@ -234,7 +234,7 @@ describe("parseNavStructures", () => {
 ]
     `;
     const entries = parseNavStructures(src);
-    const sections = entries.map((e) => e.sectionSlug).sort();
+    const sections = entries.map(e => e.sectionSlug).sort();
     // 2 sections + 1 bare = 3 rows for the single 'deploy' entry
     expect(sections).toEqual(["", "ops", "overview"]);
   });
@@ -248,7 +248,7 @@ describe("parseNavStructures", () => {
     // Override with a *different* base to prove the override is respected.
     const custom = { HIVE: "docs/custom-hive" };
     const entries = parseNavStructures(src, custom);
-    expect(entries.every((e) => e.base === "docs/custom-hive")).toBe(true);
+    expect(entries.every(e => e.base === "docs/custom-hive")).toBe(true);
   });
 });
 
@@ -264,7 +264,7 @@ describe("navEntryRoute", () => {
 
   it("emits a section-scoped route when sectionSlug is set", () => {
     expect(navEntryRoute({ ...base, sectionSlug: "ops" })).toBe(
-      "/docs/hive/ops/overview",
+      "/docs/hive/ops/overview"
     );
   });
 
@@ -277,17 +277,17 @@ describe("resolveInternalLink", () => {
   it("returns null for external, anchor, or empty links", () => {
     expect(resolveInternalLink("", "/docs/hive/overview")).toBeNull();
     expect(
-      resolveInternalLink("https://example.com", "/docs/hive/overview"),
+      resolveInternalLink("https://example.com", "/docs/hive/overview")
     ).toBeNull();
     expect(resolveInternalLink("#section", "/docs/hive/overview")).toBeNull();
   });
 
   it("returns null for asset extensions", () => {
     expect(
-      resolveInternalLink("./diagram.png", "/docs/hive/overview"),
+      resolveInternalLink("./diagram.png", "/docs/hive/overview")
     ).toBeNull();
     expect(
-      resolveInternalLink("/img/logo.svg", "/docs/hive/overview"),
+      resolveInternalLink("/img/logo.svg", "/docs/hive/overview")
     ).toBeNull();
   });
 
@@ -298,43 +298,43 @@ describe("resolveInternalLink", () => {
 
   it("resolves relative links against baseRoute's directory", () => {
     expect(
-      resolveInternalLink("getting-started.md", "/docs/hive/overview"),
+      resolveInternalLink("getting-started.md", "/docs/hive/overview")
     ).toBe("/docs/hive/getting-started");
   });
 
   it("resolves parent-relative links", () => {
     expect(
-      resolveInternalLink("../console/overview.md", "/docs/hive/overview"),
+      resolveInternalLink("../console/overview.md", "/docs/hive/overview")
     ).toBe("/docs/console/overview");
   });
 
   it("keeps absolute-path links intact (no join)", () => {
     expect(
-      resolveInternalLink("/docs/hive/other.md", "/docs/console/overview"),
+      resolveInternalLink("/docs/hive/other.md", "/docs/console/overview")
     ).toBe("/docs/hive/other");
   });
 
   it("strips a ?query suffix before resolving", () => {
     expect(
-      resolveInternalLink("target.md?foo=bar", "/docs/hive/overview"),
+      resolveInternalLink("target.md?foo=bar", "/docs/hive/overview")
     ).toBe("/docs/hive/target");
   });
 
   it("strips a #fragment suffix before resolving", () => {
-    expect(
-      resolveInternalLink("target.md#anchor", "/docs/hive/overview"),
-    ).toBe("/docs/hive/target");
+    expect(resolveInternalLink("target.md#anchor", "/docs/hive/overview")).toBe(
+      "/docs/hive/target"
+    );
   });
 
   it("strips a .mdx extension too", () => {
     expect(
-      resolveInternalLink("tutorial.mdx", "/docs/hive/guides/overview"),
+      resolveInternalLink("tutorial.mdx", "/docs/hive/guides/overview")
     ).toBe("/docs/hive/guides/tutorial");
   });
 
   it("leaves extensionless internal links alone (no double-strip)", () => {
-    expect(
-      resolveInternalLink("./target", "/docs/hive/overview"),
-    ).toBe("/docs/hive/target");
+    expect(resolveInternalLink("./target", "/docs/hive/overview")).toBe(
+      "/docs/hive/target"
+    );
   });
 });
diff --git a/scripts/check-internal-links-helpers.ts b/scripts/check-internal-links-helpers.ts
index 056e05f..5749711 100644
--- a/scripts/check-internal-links-helpers.ts
+++ b/scripts/check-internal-links-helpers.ts
@@ -141,7 +141,7 @@ export interface NavAliasEntry {
  */
 export function parseNavStructures(
   pageMapSrc: string,
-  projectForNav: Record<string, string> = PROJECT_FOR_NAV,
+  projectForNav: Record<string, string> = PROJECT_FOR_NAV
 ): NavAliasEntry[] {
   const results: NavAliasEntry[] = [];
   const navBlockRe = /const NAV_STRUCTURE_([A-Z_]+)[^=]*=\s*(\[[\s\S]*?\n\])/g;
@@ -210,7 +210,7 @@ export function navEntryRoute(e: NavAliasEntry): string {
  */
 export function resolveInternalLink(
   raw: string,
-  baseRoute: string,
+  baseRoute: string
 ): string | null {
   if (isExternalOrAnchor(raw)) return null;
 
diff --git a/scripts/check-internal-links.ts b/scripts/check-internal-links.ts
index 89ff5a6..a1faa83 100644
--- a/scripts/check-internal-links.ts
+++ b/scripts/check-internal-links.ts
@@ -81,7 +81,7 @@ for (const entry of parseNavStructures(pageMapSrc, PROJECT_FOR_NAV)) {
   const fileAbs = path.join(
     contentRoot,
     entry.base.replace(/^docs\/?/, ""),
-    entry.file,
+    entry.file
   );
   if (!fs.existsSync(fileAbs) && entry.base !== "docs") {
     // Kubestellar nav references live under docs/content directly.
diff --git a/scripts/generate-shared-config.test.ts b/scripts/generate-shared-config.test.ts
index 6a97efa..0b8abfb 100644
--- a/scripts/generate-shared-config.test.ts
+++ b/scripts/generate-shared-config.test.ts
@@ -13,8 +13,15 @@ import { fileURLToPath } from "node:url";
  * run it there via tsx — the real repo's shared.json is never touched.
  */
 
-const repoRoot = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
-const scriptSource = path.join(repoRoot, "scripts", "generate-shared-config.ts");
+const repoRoot = path.resolve(
+  path.dirname(fileURLToPath(import.meta.url)),
+  ".."
+);
+const scriptSource = path.join(
+  repoRoot,
+  "scripts",
+  "generate-shared-config.ts"
+);
 const tsxBin = path.join(repoRoot, "node_modules", ".bin", "tsx");
 
 const FIXTURE_VERSIONS = `
@@ -57,7 +64,10 @@ function writeFixtureRepo(): { scriptPath: string; sharedJsonPath: string } {
   const scriptPath = path.join(scriptsDir, "generate-shared-config.ts");
   fs.copyFileSync(scriptSource, scriptPath);
   fs.writeFileSync(path.join(configDir, "versions.ts"), FIXTURE_VERSIONS);
-  return { scriptPath, sharedJsonPath: path.join(publicConfigDir, "shared.json") };
+  return {
+    scriptPath,
+    sharedJsonPath: path.join(publicConfigDir, "shared.json"),
+  };
 }
 
 function runScript(scriptPath: string) {
@@ -68,7 +78,7 @@ function runScript(scriptPath: string) {
   });
   if (result.status !== 0) {
     throw new Error(
-      `generate-shared-config failed (status ${result.status}):\n${result.stdout}\n${result.stderr}`,
+      `generate-shared-config failed (status ${result.status}):\n${result.stdout}\n${result.stderr}`
     );
   }
   return result;
@@ -114,7 +124,9 @@ describe("generate-shared-config", () => {
     const shared = JSON.parse(fs.readFileSync(sharedJsonPath, "utf8"));
 
     expect(shared.versions.alpha.v6.isDev).toBe(true);
-    expect(shared.versions.alpha.v4.externalUrl).toBe("https://v4.example.test");
+    expect(shared.versions.alpha.v4.externalUrl).toBe(
+      "https://v4.example.test"
+    );
     // The stable entry must not carry the optional keys at all.
     expect("isDev" in shared.versions.alpha.v5).toBe(false);
     expect("externalUrl" in shared.versions.alpha.v5).toBe(false);
@@ -127,12 +139,14 @@ describe("generate-shared-config", () => {
       sharedJsonPath,
       JSON.stringify({
         surveyUrl: "https://survey.example.test/q1",
-        relatedProjects: [{ name: "Spektacular", url: "https://spektacular.dev" }],
+        relatedProjects: [
+          { name: "Spektacular", url: "https://spektacular.dev" },
+        ],
         editBaseUrls: { docs: "https://example.test/edit/main/docs" },
         // Stale generated data that must be replaced, not preserved.
         versions: { stale: {} },
         projects: { stale: {} },
-      }),
+      })
     );
     runScript(scriptPath);
     const shared = JSON.parse(fs.readFileSync(sharedJsonPath, "utf8"));
diff --git a/scripts/generate-shared-config.ts b/scripts/generate-shared-config.ts
index 35a175c..d395958 100644
--- a/scripts/generate-shared-config.ts
+++ b/scripts/generate-shared-config.ts
@@ -15,17 +15,17 @@
  * overwrites hand-maintained content.
  */
 
-import fs from 'node:fs';
-import path from 'node:path';
-import { fileURLToPath } from 'node:url';
+import fs from "node:fs";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
 
 // ---------------------------------------------------------------------------
 // Resolve paths relative to repo root
 // ---------------------------------------------------------------------------
 const __dirname = path.dirname(fileURLToPath(import.meta.url));
-const repoRoot = path.resolve(__dirname, '..');
-const versionsPath = path.join(repoRoot, 'src', 'config', 'versions.ts');
-const sharedJsonPath = path.join(repoRoot, 'public', 'config', 'shared.json');
+const repoRoot = path.resolve(__dirname, "..");
+const versionsPath = path.join(repoRoot, "src", "config", "versions.ts");
+const sharedJsonPath = path.join(repoRoot, "public", "config", "shared.json");
 
 // ---------------------------------------------------------------------------
 // Import version data from versions.ts and generate shared.json
@@ -48,11 +48,16 @@ interface ExistingSharedConfig {
 }
 
 (async () => {
-  const { PROJECTS } = await import(versionsPath) as typeof import('../src/config/versions');
+  const { PROJECTS } = (await import(
+    versionsPath
+  )) as typeof import("../src/config/versions");
 
   // Build versions and projects maps from PROJECTS
   const versions: Record<string, Record<string, VersionEntry>> = {};
-  const projects: Record<string, { name: string; basePath: string; currentVersion: string }> = {};
+  const projects: Record<
+    string,
+    { name: string; basePath: string; currentVersion: string }
+  > = {};
 
   for (const [id, project] of Object.entries(PROJECTS)) {
     versions[id] = Object.fromEntries(
@@ -65,7 +70,7 @@ interface ExistingSharedConfig {
         if (v.externalUrl) entry.externalUrl = v.externalUrl;
         if (v.isDev) entry.isDev = v.isDev;
         return [key, entry];
-      }),
+      })
     );
 
     projects[id] = {
@@ -78,12 +83,16 @@ interface ExistingSharedConfig {
   // Preserve hand-maintained fields from the existing shared.json
   let existing: ExistingSharedConfig = {};
   if (fs.existsSync(sharedJsonPath)) {
-    existing = JSON.parse(fs.readFileSync(sharedJsonPath, 'utf8')) as ExistingSharedConfig;
+    existing = JSON.parse(
+      fs.readFileSync(sharedJsonPath, "utf8")
+    ) as ExistingSharedConfig;
   }
 
   // Derive editBaseUrls from project data; fall back to existing values so
   // hand-maintained URLs (e.g. external repos) are not lost.
-  const editBaseUrls: Record<string, string> = { ...(existing.editBaseUrls ?? {}) };
+  const editBaseUrls: Record<string, string> = {
+    ...(existing.editBaseUrls ?? {}),
+  };
   // Hive-family edit URLs are static (see DocsSourceActions.tsx); nothing to
   // derive from version branches here.
 
@@ -97,6 +106,11 @@ interface ExistingSharedConfig {
     updatedAt: new Date().toISOString(),
   };
 
-  fs.writeFileSync(sharedJsonPath, JSON.stringify(sharedConfig, null, 2) + '\n');
-  console.log(`✅ Generated ${path.relative(repoRoot, sharedJsonPath)} from versions.ts`);
+  fs.writeFileSync(
+    sharedJsonPath,
+    JSON.stringify(sharedConfig, null, 2) + "\n"
+  );
+  console.log(
+    `✅ Generated ${path.relative(repoRoot, sharedJsonPath)} from versions.ts`
+  );
 })();
diff --git a/scripts/markdown-fences.test.ts b/scripts/markdown-fences.test.ts
index f208498..37e6024 100644
--- a/scripts/markdown-fences.test.ts
+++ b/scripts/markdown-fences.test.ts
@@ -38,11 +38,15 @@ describe("normalizeFences", () => {
 
   it("supports tilde fences", () => {
     const input = "x\n~~~\ncode\n~~~\ny\n";
-    expect(normalizeFences(input)).toBe(`x\n\n~~~${DEFAULT_FENCE_LANGUAGE}\ncode\n~~~\n\ny\n`);
+    expect(normalizeFences(input)).toBe(
+      `x\n\n~~~${DEFAULT_FENCE_LANGUAGE}\ncode\n~~~\n\ny\n`
+    );
   });
 
   it("leaves a fence that closes the document unchanged apart from the language", () => {
     const input = "text\n```\ncode\n```";
-    expect(normalizeFences(input)).toBe(`text\n\n\`\`\`${DEFAULT_FENCE_LANGUAGE}\ncode\n\`\`\``);
+    expect(normalizeFences(input)).toBe(
+      `text\n\n\`\`\`${DEFAULT_FENCE_LANGUAGE}\ncode\n\`\`\``
+    );
   });
 });
diff --git a/scripts/markdown-fences.ts b/scripts/markdown-fences.ts
index b766a18..d5ea0b5 100644
--- a/scripts/markdown-fences.ts
+++ b/scripts/markdown-fences.ts
@@ -65,7 +65,8 @@ export function normalizeFences(content: string): string {
       // MD031: blank line before the opener.
       if (out.length > 0 && out[out.length - 1].trim() !== "") out.push("");
       // MD040: language on the opener.
-      const lang = info.trim() === "" ? DEFAULT_FENCE_LANGUAGE : info.trimStart();
+      const lang =
+        info.trim() === "" ? DEFAULT_FENCE_LANGUAGE : info.trimStart();
       out.push(`${indent}${marker}${lang}`);
       open = { marker };
       continue;
diff --git a/scripts/mdx-to-markdown.test.ts b/scripts/mdx-to-markdown.test.ts
index def87d7..7760976 100644
--- a/scripts/mdx-to-markdown.test.ts
+++ b/scripts/mdx-to-markdown.test.ts
@@ -1,11 +1,17 @@
 import { describe, it, expect } from "vitest";
-import { convertMdxToMarkdown, parseAttrs, splitFrontmatter } from "./mdx-to-markdown";
+import {
+  convertMdxToMarkdown,
+  parseAttrs,
+  splitFrontmatter,
+} from "./mdx-to-markdown";
 
 const SITE = "https://spektacular.dev";
 
 describe("splitFrontmatter", () => {
   it("parses quoted and bare values and returns the body", () => {
-    const { data, body } = splitFrontmatter('---\ntitle: "A title"\norder: 10\n---\nBody\n');
+    const { data, body } = splitFrontmatter(
+      '---\ntitle: "A title"\norder: 10\n---\nBody\n'
+    );
     expect(data).toEqual({ title: "A title", order: "10" });
     expect(body).toBe("Body\n");
   });
@@ -17,7 +23,11 @@ describe("splitFrontmatter", () => {
 
 describe("parseAttrs", () => {
   it("reads string, expression and boolean attributes", () => {
-    expect(parseAttrs(' spaced number="1" heading="Clone" start={107} fullscreen={true}')).toEqual({
+    expect(
+      parseAttrs(
+        ' spaced number="1" heading="Clone" start={107} fullscreen={true}'
+      )
+    ).toEqual({
       spaced: true,
       number: "1",
       heading: "Clone",
@@ -29,11 +39,14 @@ describe("parseAttrs", () => {
 
 describe("convertMdxToMarkdown", () => {
   it("lifts title and summary into an H1 and lede", () => {
-    const src = '---\ntitle: "How to use it"\nsummary: "Short summary."\norder: 1\n---\nHello.\n';
+    const src =
+      '---\ntitle: "How to use it"\nsummary: "Short summary."\norder: 1\n---\nHello.\n';
     const out = convertMdxToMarkdown(src, { siteBase: SITE });
     expect(out.title).toBe("How to use it");
     expect(out.description).toBe("Short summary.");
-    expect(out.markdown).toBe("# How to use it\n\n_Short summary._\n\nHello.\n");
+    expect(out.markdown).toBe(
+      "# How to use it\n\n_Short summary._\n\nHello.\n"
+    );
   });
 
   it("strips multi-line imports and component exports", () => {
@@ -68,7 +81,9 @@ describe("convertMdxToMarkdown", () => {
       "</Step>",
     ].join("\n");
     const out = convertMdxToMarkdown(src, { siteBase: SITE });
-    expect(out.markdown).toBe("### Step 2: Install\n\nVerify:\n\n```bash\nspektacular --version\n```\n");
+    expect(out.markdown).toBe(
+      "### Step 2: Install\n\nVerify:\n\n```bash\nspektacular --version\n```\n"
+    );
   });
 
   it("converts nested <AgentBlock> inside <Step> to labelled sections", () => {
@@ -114,26 +129,37 @@ describe("convertMdxToMarkdown", () => {
   });
 
   it("turns a self-closing <YouTubeVideo> into a timestamped link", () => {
-    const src = '<YouTubeVideo url="https://youtu.be/abc" start={108} end={151} fullscreen={true} />\n';
+    const src =
+      '<YouTubeVideo url="https://youtu.be/abc" start={108} end={151} fullscreen={true} />\n';
     const out = convertMdxToMarkdown(src, { siteBase: SITE });
-    expect(out.markdown).toBe("[Watch this section on YouTube (from 1:48)](https://youtu.be/abc?t=108)\n");
+    expect(out.markdown).toBe(
+      "[Watch this section on YouTube (from 1:48)](https://youtu.be/abc?t=108)\n"
+    );
   });
 
   it("flattens an unknown block component to its content and records a note", () => {
     const src = '<Callout kind="warn">\n  Careful.\n</Callout>\n';
     const out = convertMdxToMarkdown(src, { siteBase: SITE });
     expect(out.markdown).toBe("Careful.\n");
-    expect(out.notes).toEqual(["flattened unknown component <Callout> to its text content"]);
+    expect(out.notes).toEqual([
+      "flattened unknown component <Callout> to its text content",
+    ]);
   });
 
   it("drops an unknown self-closing component and records a note", () => {
-    const out = convertMdxToMarkdown("Before\n\n<AgentSelector />\n\nAfter\n", { siteBase: SITE });
+    const out = convertMdxToMarkdown("Before\n\n<AgentSelector />\n\nAfter\n", {
+      siteBase: SITE,
+    });
     expect(out.markdown).toBe("Before\n\nAfter\n");
-    expect(out.notes).toEqual(["dropped self-closing component <AgentSelector /> (no Markdown equivalent)"]);
+    expect(out.notes).toEqual([
+      "dropped self-closing component <AgentSelector /> (no Markdown equivalent)",
+    ]);
   });
 
   it("removes inline tags but keeps their text", () => {
-    const out = convertMdxToMarkdown("Use <Badge>beta</Badge> now.\n", { siteBase: SITE });
+    const out = convertMdxToMarkdown("Use <Badge>beta</Badge> now.\n", {
+      siteBase: SITE,
+    });
     expect(out.markdown).toBe("Use beta now.\n");
     expect(out.notes).toHaveLength(2);
   });
@@ -142,7 +168,7 @@ describe("convertMdxToMarkdown", () => {
     const src = "See the [guide](/install/).\n\n![init](/images/t/init.png)\n";
     const out = convertMdxToMarkdown(src, {
       siteBase: SITE,
-      rewriteImage: (s) => `assets${s}`,
+      rewriteImage: s => `assets${s}`,
     });
     expect(out.markdown).toBe(
       "See the [guide](https://spektacular.dev/install/).\n\n![init](assets/images/t/init.png)\n"
@@ -156,7 +182,7 @@ describe("convertMdxToMarkdown", () => {
   });
 
   it("leaves absolute URLs, anchors and code untouched", () => {
-    const src = "[repo](https://github.com/x/y) [top](#top) `{\"step\":\"a\"}`\n";
+    const src = '[repo](https://github.com/x/y) [top](#top) `{"step":"a"}`\n';
     expect(convertMdxToMarkdown(src, { siteBase: SITE }).markdown).toBe(src);
   });
 
@@ -166,7 +192,9 @@ describe("convertMdxToMarkdown", () => {
   });
 
   it("removes JSX comments", () => {
-    const out = convertMdxToMarkdown("A\n\n{/* hidden */}\n\nB\n", { siteBase: SITE });
+    const out = convertMdxToMarkdown("A\n\n{/* hidden */}\n\nB\n", {
+      siteBase: SITE,
+    });
     expect(out.markdown).toBe("A\n\nB\n");
   });
 });
diff --git a/scripts/mdx-to-markdown.ts b/scripts/mdx-to-markdown.ts
index a1e8733..d2f4b2a 100644
--- a/scripts/mdx-to-markdown.ts
+++ b/scripts/mdx-to-markdown.ts
@@ -52,7 +52,8 @@ const BLOCK_OPEN_RE = /^\s*<([A-Z][A-Za-z0-9.]*)((?:\s+[^>]*?)?)\s*(\/?)>\s*$/;
 const BLOCK_CLOSE_RE = /^\s*<\/([A-Z][A-Za-z0-9.]*)\s*>\s*$/;
 const INLINE_TAG_RE = /<\/?([A-Z][A-Za-z0-9.]*)(?:\s+[^>]*?)?\s*\/?>/g;
 const IMPORT_RE = /^import\b[\s\S]*?;[ \t]*$/gm;
-const EXPORT_RE = /^export\s+(?:const|let|var|default|function)\b[\s\S]*?;[ \t]*$/gm;
+const EXPORT_RE =
+  /^export\s+(?:const|let|var|default|function)\b[\s\S]*?;[ \t]*$/gm;
 const JSX_COMMENT_RE = /\{\/\*[\s\S]*?\*\/\}/g;
 const SECONDS_PER_MINUTE = 60;
 
@@ -68,7 +69,10 @@ type Attrs = Record<string, string | number | boolean>;
 // Frontmatter
 // ---------------------------------------------------------------------------
 
-export function splitFrontmatter(src: string): { data: Record<string, string>; body: string } {
+export function splitFrontmatter(src: string): {
+  data: Record<string, string>;
+  body: string;
+} {
   const m = src.match(/^---\r?\n([\s\S]*?)\r?\n---\r?\n?/);
   if (!m) return { data: {}, body: src };
   const data: Record<string, string> = {};
@@ -93,7 +97,8 @@ export function splitFrontmatter(src: string): { data: Record<string, string>; b
 
 export function parseAttrs(raw: string): Attrs {
   const attrs: Attrs = {};
-  const re = /([A-Za-z_][\w-]*)(?:\s*=\s*(?:"([^"]*)"|'([^']*)'|\{([^}]*)\}))?/g;
+  const re =
+    /([A-Za-z_][\w-]*)(?:\s*=\s*(?:"([^"]*)"|'([^']*)'|\{([^}]*)\}))?/g;
   let m: RegExpExecArray | null;
   while ((m = re.exec(raw)) !== null) {
     const [, name, dq, sq, expr] = m;
@@ -123,7 +128,10 @@ function formatTimestamp(seconds: number): string {
 function renderYouTube(attrs: Attrs): string {
   const url = typeof attrs.url === "string" ? attrs.url : "";
   const start = typeof attrs.start === "number" ? attrs.start : undefined;
-  const href = start !== undefined ? `${url}${url.includes("?") ? "&" : "?"}t=${start}` : url;
+  const href =
+    start !== undefined
+      ? `${url}${url.includes("?") ? "&" : "?"}t=${start}`
+      : url;
   const label =
     start !== undefined
       ? `Watch this section on YouTube (from ${formatTimestamp(start)})`
@@ -134,13 +142,17 @@ function renderYouTube(attrs: Attrs): string {
 function renderStep(attrs: Attrs, inner: string): string {
   const number = attrs.number !== undefined ? String(attrs.number) : "";
   const heading = typeof attrs.heading === "string" ? attrs.heading : "";
-  const title = number && heading ? `Step ${number}: ${heading}` : heading || `Step ${number}`;
+  const title =
+    number && heading
+      ? `Step ${number}: ${heading}`
+      : heading || `Step ${number}`;
   return `### ${title}\n\n${inner.trim()}`;
 }
 
 function renderAgentBlock(attrs: Attrs, inner: string): string {
   const id = typeof attrs.for === "string" ? attrs.for : "";
-  const label = AGENT_LABELS[id] ?? (id ? id[0].toUpperCase() + id.slice(1) : "Agent");
+  const label =
+    AGENT_LABELS[id] ?? (id ? id[0].toUpperCase() + id.slice(1) : "Agent");
   return `**${label}**\n\n${inner.trim()}`;
 }
 
@@ -156,7 +168,7 @@ function dedent(lines: string[]): string[] {
     if (indent < min) min = indent;
   }
   if (!Number.isFinite(min) || min === 0) return lines;
-  return lines.map((l) => (l.trim() === "" ? "" : l.slice(min)));
+  return lines.map(l => (l.trim() === "" ? "" : l.slice(min)));
 }
 
 function findClose(lines: string[], from: number, name: string): number {
@@ -165,7 +177,13 @@ function findClose(lines: string[], from: number, name: string): number {
   for (let i = from; i < lines.length; i++) {
     const f = lines[i].match(FENCE_RE);
     if (fence) {
-      if (f && f[1][0] === fence[0] && f[1].length >= fence.length && f[2].trim() === "") fence = null;
+      if (
+        f &&
+        f[1][0] === fence[0] &&
+        f[1].length >= fence.length &&
+        f[2].trim() === ""
+      )
+        fence = null;
       continue;
     }
     if (f) {
@@ -192,7 +210,13 @@ function convertBlocks(lines: string[], notes: string[]): string[] {
     const f = line.match(FENCE_RE);
     if (fence) {
       out.push(line);
-      if (f && f[1][0] === fence[0] && f[1].length >= fence.length && f[2].trim() === "") fence = null;
+      if (
+        f &&
+        f[1][0] === fence[0] &&
+        f[1].length >= fence.length &&
+        f[2].trim() === ""
+      )
+        fence = null;
       continue;
     }
     if (f) {
@@ -209,16 +233,23 @@ function convertBlocks(lines: string[], notes: string[]): string[] {
         if (name === "YouTubeVideo") {
           out.push(renderYouTube(attrs));
         } else {
-          notes.push(`dropped self-closing component <${name} /> (no Markdown equivalent)`);
+          notes.push(
+            `dropped self-closing component <${name} /> (no Markdown equivalent)`
+          );
         }
         continue;
       }
       const closeIdx = findClose(lines, i + 1, name);
       if (closeIdx === -1) {
-        notes.push(`unterminated <${name}> at line ${i + 1}; tag removed, content kept`);
+        notes.push(
+          `unterminated <${name}> at line ${i + 1}; tag removed, content kept`
+        );
         continue;
       }
-      const inner = convertBlocks(dedent(lines.slice(i + 1, closeIdx)), notes).join("\n");
+      const inner = convertBlocks(
+        dedent(lines.slice(i + 1, closeIdx)),
+        notes
+      ).join("\n");
       if (name === "Step") out.push(renderStep(attrs, inner));
       else if (name === "AgentBlock") out.push(renderAgentBlock(attrs, inner));
       else {
@@ -256,42 +287,49 @@ function withCodeProtected(src: string, fn: (s: string) => string): string {
   return s.replace(/\u0000(\d+)\u0000/g, (_, i) => slots[Number(i)]);
 }
 
-export function convertMdxToMarkdown(src: string, opts: MdxConvertOptions): MdxConversion {
+export function convertMdxToMarkdown(
+  src: string,
+  opts: MdxConvertOptions
+): MdxConversion {
   const notes: string[] = [];
   const images: string[] = [];
   const imagePrefix = opts.imagePrefix ?? DEFAULT_IMAGE_PREFIX;
-  const rewriteImage = opts.rewriteImage ?? ((s: string) => s.replace(/^\//, ""));
+  const rewriteImage =
+    opts.rewriteImage ?? ((s: string) => s.replace(/^\//, ""));
   const siteBase = opts.siteBase.replace(/\/$/, "");
 
   const { data, body } = splitFrontmatter(src);
   const title = data.title;
   const description = data.summary ?? data.description;
 
-  let text = withCodeProtected(body, (s) =>
+  let text = withCodeProtected(body, s =>
     s.replace(IMPORT_RE, "").replace(EXPORT_RE, "").replace(JSX_COMMENT_RE, "")
   );
 
   text = convertBlocks(text.split("\n"), notes).join("\n");
 
-  text = withCodeProtected(text, (s) => {
+  text = withCodeProtected(text, s => {
     // Inline components left inside paragraphs: keep the text, drop the tags.
     s = s.replace(INLINE_TAG_RE, (m, name: string) => {
       notes.push(`removed inline tag ${m.trim()} (<${name}>)`);
       return "";
     });
     // Links and images.
-    s = s.replace(/(!?)\[([^\]]*)\]\(([^)\s]+)((?:\s+"[^"]*")?)\)/g, (m, bang, alt, href, tail) => {
-      if (bang === "!" && href.startsWith(imagePrefix)) {
-        images.push(href);
-        return `![${alt}](${rewriteImage(href)}${tail})`;
-      }
-      if (bang !== "!" && href.startsWith("/")) {
-        return `[${alt}](${siteBase}${href}${tail})`;
+    s = s.replace(
+      /(!?)\[([^\]]*)\]\(([^)\s]+)((?:\s+"[^"]*")?)\)/g,
+      (m, bang, alt, href, tail) => {
+        if (bang === "!" && href.startsWith(imagePrefix)) {
+          images.push(href);
+          return `![${alt}](${rewriteImage(href)}${tail})`;
+        }
+        if (bang !== "!" && href.startsWith("/")) {
+          return `[${alt}](${siteBase}${href}${tail})`;
+        }
+        return m;
       }
-      return m;
-    });
+    );
     // Stray braces would be parsed as MDX expressions.
-    s = s.replace(/[{}]/g, (c) => (c === "{" ? "&#123;" : "&#125;"));
+    s = s.replace(/[{}]/g, c => (c === "{" ? "&#123;" : "&#125;"));
     return s;
   });
 
diff --git a/scripts/npm-audit-gate.test.ts b/scripts/npm-audit-gate.test.ts
index 5b858f4..8e7b717 100644
--- a/scripts/npm-audit-gate.test.ts
+++ b/scripts/npm-audit-gate.test.ts
@@ -77,11 +77,11 @@ describe("ghsaIdFromUrl", () => {
 describe("collectAdvisories", () => {
   it("collects only root advisory objects, deduplicated", () => {
     const advs = collectAdvisories(REPORT);
-    expect(advs.map((a) => a.id).sort()).toEqual([
+    expect(advs.map(a => a.id).sort()).toEqual([
       "GHSA-AAAA-BBBB-CCCC",
       "GHSA-VFJ7-8CJW-P6XM",
     ]);
-    const braces = advs.find((a) => a.package === "braces")!;
+    const braces = advs.find(a => a.package === "braces")!;
     expect(braces.severity).toBe("high");
     expect(braces.url).toBe(BRACES_URL);
   });
@@ -99,15 +99,15 @@ describe("collectAdvisories", () => {
 describe("evaluateAudit", () => {
   it("blocks high advisories with no exception and ignores lower ones", () => {
     const r = evaluateAudit(REPORT, [], "high", NOW);
-    expect(r.blocking.map((a) => a.id)).toEqual(["GHSA-VFJ7-8CJW-P6XM"]);
-    expect(r.belowLevel.map((a) => a.id)).toEqual(["GHSA-AAAA-BBBB-CCCC"]);
+    expect(r.blocking.map(a => a.id)).toEqual(["GHSA-VFJ7-8CJW-P6XM"]);
+    expect(r.belowLevel.map(a => a.id)).toEqual(["GHSA-AAAA-BBBB-CCCC"]);
     expect(r.excepted).toEqual([]);
   });
 
   it("passes when every high advisory is covered by an active exception", () => {
     const r = evaluateAudit(REPORT, [exception()], "high", NOW);
     expect(r.blocking).toEqual([]);
-    expect(r.excepted.map((a) => a.id)).toEqual(["GHSA-VFJ7-8CJW-P6XM"]);
+    expect(r.excepted.map(a => a.id)).toEqual(["GHSA-VFJ7-8CJW-P6XM"]);
     expect(r.unused).toEqual([]);
   });
 
@@ -128,7 +128,7 @@ describe("evaluateAudit", () => {
       "high",
       NOW
     );
-    expect(r.blocking.map((a) => a.id)).toEqual(["GHSA-VFJ7-8CJW-P6XM"]);
+    expect(r.blocking.map(a => a.id)).toEqual(["GHSA-VFJ7-8CJW-P6XM"]);
     expect(r.unused).toHaveLength(1);
   });
 
@@ -165,7 +165,7 @@ describe("evaluateAudit", () => {
       "high",
       NOW
     );
-    expect(r.unused.map((e) => e.id)).toEqual(["GHSA-zzzz-zzzz-zzzz"]);
+    expect(r.unused.map(e => e.id)).toEqual(["GHSA-zzzz-zzzz-zzzz"]);
   });
 
   it("honours the level threshold", () => {
diff --git a/scripts/npm-audit-gate.ts b/scripts/npm-audit-gate.ts
index cd1e577..958e9ba 100644
--- a/scripts/npm-audit-gate.ts
+++ b/scripts/npm-audit-gate.ts
@@ -143,7 +143,7 @@ export function evaluateAudit(
     }
   }
   const unused = [...active.values()].filter(
-    (ex) => !used.has(ex.id.toUpperCase())
+    ex => !used.has(ex.id.toUpperCase())
   );
 
   return { blocking, excepted, belowLevel, expired, unused, invalid };
@@ -163,9 +163,9 @@ function fmt(adv: Advisory): string {
 }
 
 export function main(argv: string[] = process.argv.slice(2)): void {
-  const levelArg = argv.find((a) => a.startsWith("--level="));
+  const levelArg = argv.find(a => a.startsWith("--level="));
   const level = levelArg ? levelArg.slice("--level=".length) : "high";
-  const reportFile = argv.find((a) => !a.startsWith("--"));
+  const reportFile = argv.find(a => !a.startsWith("--"));
   if (!reportFile) {
     console.error(
       "usage: npx tsx scripts/npm-audit-gate.ts <audit.json> [--level=high]"
@@ -204,12 +204,16 @@ export function main(argv: string[] = process.argv.slice(2)): void {
   let failed = false;
   if (result.invalid.length > 0) {
     failed = true;
-    console.error("\n❌ Malformed exception entries (need id, reason, expires):");
+    console.error(
+      "\n❌ Malformed exception entries (need id, reason, expires):"
+    );
     for (const raw of result.invalid) console.error(`  ${raw}`);
   }
   if (result.expired.length > 0) {
     failed = true;
-    console.error("\n❌ Expired npm audit exceptions (re-review and extend or remove):");
+    console.error(
+      "\n❌ Expired npm audit exceptions (re-review and extend or remove):"
+    );
     for (const ex of result.expired) {
       console.error(`  ${ex.id}  expired ${ex.expires}  ${ex.reason}`);
     }
diff --git a/scripts/scrub-legacy-branding.test.ts b/scripts/scrub-legacy-branding.test.ts
index fd5d2a8..4f95e6b 100644
--- a/scripts/scrub-legacy-branding.test.ts
+++ b/scripts/scrub-legacy-branding.test.ts
@@ -3,15 +3,21 @@ import { scrubLegacyBranding } from "./scrub-legacy-branding";
 
 describe("scrubLegacyBranding", () => {
   it("rewrites transferred jumppad-labs repo sub-paths but not the Go module path", () => {
-    expect(scrubLegacyBranding("https://github.com/jumppad-labs/spektacular/releases")).toBe(
-      "https://github.com/hivecommons/spektacular/releases"
-    );
-    expect(scrubLegacyBranding("go install github.com/jumppad-labs/spektacular@latest")).toBe(
-      "go install github.com/jumppad-labs/spektacular@latest"
-    );
-    expect(scrubLegacyBranding("https://github.com/jumppad-labs/tutorial-spektacular-how-to")).toBe(
-      "https://github.com/jumppad-labs/tutorial-spektacular-how-to"
-    );
+    expect(
+      scrubLegacyBranding(
+        "https://github.com/jumppad-labs/spektacular/releases"
+      )
+    ).toBe("https://github.com/hivecommons/spektacular/releases");
+    expect(
+      scrubLegacyBranding(
+        "go install github.com/jumppad-labs/spektacular@latest"
+      )
+    ).toBe("go install github.com/jumppad-labs/spektacular@latest");
+    expect(
+      scrubLegacyBranding(
+        "https://github.com/jumppad-labs/tutorial-spektacular-how-to"
+      )
+    ).toBe("https://github.com/jumppad-labs/tutorial-spektacular-how-to");
   });
 
   it("rewrites KubeStellar branding and repo references", () => {
@@ -26,10 +32,12 @@ describe("scrubLegacyBranding", () => {
 
   it("keeps the ghcr.io/kubestellar mirror org intact (docs#180)", () => {
     expect(
-      scrubLegacyBranding("`ghcr.io/hivecommons/hive` and `ghcr.io/kubestellar/hive`"),
+      scrubLegacyBranding(
+        "`ghcr.io/hivecommons/hive` and `ghcr.io/kubestellar/hive`"
+      )
     ).toBe("`ghcr.io/hivecommons/hive` and `ghcr.io/kubestellar/hive`");
     expect(scrubLegacyBranding("ghcr.io/kubestellar/hive-hub:stable")).toBe(
-      "ghcr.io/kubestellar/hive-hub:stable",
+      "ghcr.io/kubestellar/hive-hub:stable"
     );
   });
 });
diff --git a/scripts/scrub-legacy-branding.ts b/scripts/scrub-legacy-branding.ts
index 474d78e..88d693d 100644
--- a/scripts/scrub-legacy-branding.ts
+++ b/scripts/scrub-legacy-branding.ts
@@ -9,30 +9,43 @@ const GHCR_KUBESTELLAR = /ghcr\.io\/kubestellar\//g;
 const GHCR_KUBESTELLAR_SENTINEL = "\u0000GHCR_KUBESTELLAR\u0000";
 
 export function scrubLegacyBranding(content: string): string {
-  return content
-    .replace(GHCR_KUBESTELLAR, GHCR_KUBESTELLAR_SENTINEL)
-    .replace(/io\.kubestellar\.hive\./g, "io.hivecommons.hive.")
-    .replace(/hive\\?\.kubestellar\\?\.io/g, (m) =>
-      m.includes("\\") ? "hive\\.hivecommons\\.dev" : "hive.hivecommons.dev")
-    .replace(/examples\/kubestellar-fixer\.md/g, "examples/hivecommons-fixer.md")
-    .replace(/examples\/kubestellar\//g, "examples/hivecommons/")
-    .replace(/@kubestellar\//g, "@hivecommons/")
-    .replace(/github\.com\/kubestellar\/hive/g, "github.com/hivecommons/hive")
-    .replace(/github\.com\/kubestellar/g, "github.com/hivecommons")
-    .replace(/kubestellar\/hive/g, "hivecommons/hive")
-    .replace(/kubestellar\/pluk/g, "hivecommons/pluk")
-    .replace(/kubestellar\/hotshot/g, "hivecommons/hotshot")
-    // Spektacular transferred from jumppad-labs. Only rewrite repo sub-paths
-    // (releases, issues, blob): the Go module path is still
-    // github.com/jumppad-labs/spektacular and the Homebrew tap still lives
-    // under jumppad-labs, so `go install ...@latest` and `brew install` must
-    // keep their original targets. Other jumppad-labs repos (the tutorial's
-    // example project) were not transferred and keep their URLs.
-    .replace(/github\.com\/jumppad-labs\/spektacular\//g, "github.com/hivecommons/spektacular/")
-    .replace(/github\.com\/jumppad-labs\/spektacular-website\//g, "github.com/hivecommons/spektacular-website/")
-    .replace(/kubestellar\.io/g, "hivecommons.dev")
-    .replace(/KubeStellar/g, "Hive Commons")
-    .replace(/Kubestellar/g, "Hive Commons")
-    .replace(/kubestellar/g, "hivecommons")
-    .split(GHCR_KUBESTELLAR_SENTINEL).join("ghcr.io/kubestellar/");
+  return (
+    content
+      .replace(GHCR_KUBESTELLAR, GHCR_KUBESTELLAR_SENTINEL)
+      .replace(/io\.kubestellar\.hive\./g, "io.hivecommons.hive.")
+      .replace(/hive\\?\.kubestellar\\?\.io/g, m =>
+        m.includes("\\") ? "hive\\.hivecommons\\.dev" : "hive.hivecommons.dev"
+      )
+      .replace(
+        /examples\/kubestellar-fixer\.md/g,
+        "examples/hivecommons-fixer.md"
+      )
+      .replace(/examples\/kubestellar\//g, "examples/hivecommons/")
+      .replace(/@kubestellar\//g, "@hivecommons/")
+      .replace(/github\.com\/kubestellar\/hive/g, "github.com/hivecommons/hive")
+      .replace(/github\.com\/kubestellar/g, "github.com/hivecommons")
+      .replace(/kubestellar\/hive/g, "hivecommons/hive")
+      .replace(/kubestellar\/pluk/g, "hivecommons/pluk")
+      .replace(/kubestellar\/hotshot/g, "hivecommons/hotshot")
+      // Spektacular transferred from jumppad-labs. Only rewrite repo sub-paths
+      // (releases, issues, blob): the Go module path is still
+      // github.com/jumppad-labs/spektacular and the Homebrew tap still lives
+      // under jumppad-labs, so `go install ...@latest` and `brew install` must
+      // keep their original targets. Other jumppad-labs repos (the tutorial's
+      // example project) were not transferred and keep their URLs.
+      .replace(
+        /github\.com\/jumppad-labs\/spektacular\//g,
+        "github.com/hivecommons/spektacular/"
+      )
+      .replace(
+        /github\.com\/jumppad-labs\/spektacular-website\//g,
+        "github.com/hivecommons/spektacular-website/"
+      )
+      .replace(/kubestellar\.io/g, "hivecommons.dev")
+      .replace(/KubeStellar/g, "Hive Commons")
+      .replace(/Kubestellar/g, "Hive Commons")
+      .replace(/kubestellar/g, "hivecommons")
+      .split(GHCR_KUBESTELLAR_SENTINEL)
+      .join("ghcr.io/kubestellar/")
+  );
 }
diff --git a/scripts/sync-hive-docs.case-1-exact-path.test.ts b/scripts/sync-hive-docs.case-1-exact-path.test.ts
index 51255e5..be93518 100644
--- a/scripts/sync-hive-docs.case-1-exact-path.test.ts
+++ b/scripts/sync-hive-docs.case-1-exact-path.test.ts
@@ -75,10 +75,7 @@ describe("rewriteLinkTarget — Case 1 (exact syncedRepoPaths lookup)", () => {
     // discriminate between Case 1 and Case 1b on its own — its value is
     // establishing baseline exact-path behavior for the ADR subtree.
     expect(
-      rewriteLinkTarget(
-        "0001-record-architecture-decisions.md",
-        ADR_README,
-      ),
+      rewriteLinkTarget("0001-record-architecture-decisions.md", ADR_README)
     ).toBe("/docs/hive/adr/0001-record-architecture-decisions");
   });
 
@@ -86,9 +83,9 @@ describe("rewriteLinkTarget — Case 1 (exact syncedRepoPaths lookup)", () => {
     // Sanity: exact-path branch attaches `${suffix}` to the mapped route.
     // Regression risk: a refactor that concatenates suffix in the wrong
     // spot (e.g. before the route lookup) would drop the anchor.
-    expect(
-      rewriteLinkTarget("architecture.md#the-governor-loop", README),
-    ).toBe("/docs/hive/architecture#the-governor-loop");
+    expect(rewriteLinkTarget("architecture.md#the-governor-loop", README)).toBe(
+      "/docs/hive/architecture#the-governor-loop"
+    );
   });
 
   it("resolves a `../adr/README.md` escape from an ADR page back to the ADR readme via exact-path", () => {
diff --git a/scripts/sync-hive-docs.ts b/scripts/sync-hive-docs.ts
index c3a4882..196a52e 100644
--- a/scripts/sync-hive-docs.ts
+++ b/scripts/sync-hive-docs.ts
@@ -65,7 +65,9 @@ const files: Array<{ source: string; target?: string }> = [
   { source: "adr/0017-podman-quadlet-lifecycle.md" },
 ];
 
-const localHiveDocs: Array<{ source: string; target?: string }> = [{ source: "public-knowledge-mcp.md" }];
+const localHiveDocs: Array<{ source: string; target?: string }> = [
+  { source: "public-knowledge-mcp.md" },
+];
 
 // ---------------------------------------------------------------------------
 // Brand scrub
@@ -256,7 +258,8 @@ async function main() {
     fs.mkdirSync(path.dirname(targetPath), { recursive: true });
     fs.writeFileSync(
       targetPath,
-      canonicalHeader(file.source) + normalizeFences(scrubLegacyBranding(rewritten))
+      canonicalHeader(file.source) +
+        normalizeFences(scrubLegacyBranding(rewritten))
     );
     console.log(`synced ${file.source} -> docs/content/hive/${target}`);
   }
diff --git a/scripts/sync-sibling-docs.test.ts b/scripts/sync-sibling-docs.test.ts
index 650701b..7ebc2e3 100644
--- a/scripts/sync-sibling-docs.test.ts
+++ b/scripts/sync-sibling-docs.test.ts
@@ -1,31 +1,53 @@
 import { describe, it, expect } from "vitest";
-import { PROJECTS, rewriteLinks, syncedHeader, type ProjectSync } from "./sync-sibling-docs";
+import {
+  PROJECTS,
+  rewriteLinks,
+  syncedHeader,
+  type ProjectSync,
+} from "./sync-sibling-docs";
 
-const SIBLING_PROJECTS = ["hotshot", "pluk", "rationguard", "promptargs", "dibs", "spektacular"];
+const SIBLING_PROJECTS = [
+  "hotshot",
+  "pluk",
+  "rationguard",
+  "promptargs",
+  "dibs",
+  "spektacular",
+];
 
 function project(id: string): ProjectSync {
-  const p = PROJECTS.find((x) => x.project === id);
+  const p = PROJECTS.find(x => x.project === id);
   if (!p) throw new Error(`no project ${id}`);
   return p;
 }
 
 describe("PROJECTS", () => {
   it("lists every sibling project exactly once", () => {
-    expect(PROJECTS.map((p) => p.project)).toEqual(SIBLING_PROJECTS);
+    expect(PROJECTS.map(p => p.project)).toEqual(SIBLING_PROJECTS);
   });
 
   it("requires a readme for every project", () => {
     for (const p of PROJECTS) {
-      expect(p.files.some((f) => f.target === "readme.md" && f.required)).toBe(true);
+      expect(p.files.some(f => f.target === "readme.md" && f.required)).toBe(
+        true
+      );
     }
   });
 
   it("pulls Spektacular from both the repo and the website", () => {
     const spek = project("spektacular");
-    const targets = spek.files.map((f) => f.target);
-    expect(targets).toEqual(["readme.md", "knowledge-base.md", "getting-started.md", "unknown-criteria.md"]);
-    const website = spek.files.filter((f) => f.repo);
-    expect(website.map((f) => f.repo!.repo)).toEqual(["spektacular-website", "spektacular-website"]);
+    const targets = spek.files.map(f => f.target);
+    expect(targets).toEqual([
+      "readme.md",
+      "knowledge-base.md",
+      "getting-started.md",
+      "unknown-criteria.md",
+    ]);
+    const website = spek.files.filter(f => f.repo);
+    expect(website.map(f => f.repo!.repo)).toEqual([
+      "spektacular-website",
+      "spektacular-website",
+    ]);
     for (const f of website) {
       expect(f.format).toBe("mdx");
       expect(f.siteBase).toBe("https://spektacular.dev");
@@ -38,18 +60,24 @@ describe("PROJECTS", () => {
 describe("syncedHeader", () => {
   it("names the per-file repo and links the canonical page for website-sourced pages", () => {
     const spek = project("spektacular");
-    const tutorial = spek.files.find((f) => f.target === "getting-started.md")!;
+    const tutorial = spek.files.find(f => f.target === "getting-started.md")!;
     const header = syncedHeader(spek, tutorial);
     expect(header).toContain("Synced from spektacular-website.");
-    expect(header).toContain("spektacular-website/blob/main/src/content/tutorials/getting-started.mdx");
-    expect(header).toContain("[spektacular.dev](https://spektacular.dev/tutorials/getting-started/)");
+    expect(header).toContain(
+      "spektacular-website/blob/main/src/content/tutorials/getting-started.mdx"
+    );
+    expect(header).toContain(
+      "[spektacular.dev](https://spektacular.dev/tutorials/getting-started/)"
+    );
     expect(header).toContain("canonical copy");
   });
 
   it("adds the canonical-site note to the overview page", () => {
     const spek = project("spektacular");
-    const readme = spek.files.find((f) => f.target === "readme.md")!;
-    expect(syncedHeader(spek, readme)).toContain("[spektacular.dev](https://spektacular.dev)");
+    const readme = spek.files.find(f => f.target === "readme.md")!;
+    expect(syncedHeader(spek, readme)).toContain(
+      "[spektacular.dev](https://spektacular.dev)"
+    );
   });
 
   it("omits the note for projects without a canonical site", () => {
@@ -68,7 +96,7 @@ describe("rewriteLinks", () => {
   });
 
   it("sends other relative links to the file's own repo", () => {
-    const tutorial = spek.files.find((f) => f.target === "getting-started.md")!;
+    const tutorial = spek.files.find(f => f.target === "getting-started.md")!;
     expect(rewriteLinks("[x](../foo.md)", spek, tutorial)).toBe(
       "[x](https://github.com/hivecommons/spektacular-website/blob/main/../foo.md)"
     );
diff --git a/scripts/sync-sibling-docs.ts b/scripts/sync-sibling-docs.ts
index 369d94d..a7fb088 100644
--- a/scripts/sync-sibling-docs.ts
+++ b/scripts/sync-sibling-docs.ts
@@ -143,78 +143,161 @@ export const PROJECTS: ProjectSync[] = [
   },
 ];
 
-
-
 // ---------------------------------------------------------------------------
 // Spek naming style
 // ---------------------------------------------------------------------------
 // Keep canonical command names, paths, and stage identifiers unchanged while the
 // docs site introduces the Spek nickname in rendered prose.
-export function introduceSpekStyle(project: string, target: string, content: string): string {
+export function introduceSpekStyle(
+  project: string,
+  target: string,
+  content: string
+): string {
   if (project !== "spektacular") return content;
 
   const replacementsByTarget: Record<string, Array<[string, string]>> = {
     "readme.md": [
-      ["# Spektacular\n\nAgent-agnostic CLI tool for spec-driven development, providing skills and integrations for coding agents (Claude, Bob, Codex) to plan and implement work from a written spec.", "# Spektacular\n\n> Spektacular — Spek for short. The specs it produces are called speks.\n\nAgent-agnostic CLI tool for spec-driven development, providing skills and integrations for coding agents (Claude, Bob, Codex) to plan and implement work from a written spek."],
-      ["## What is Spektacular?\n\nSpektacular is a self-contained Go binary", "## What is Spektacular?\n\nSpek is a self-contained Go binary"],
+      [
+        "# Spektacular\n\nAgent-agnostic CLI tool for spec-driven development, providing skills and integrations for coding agents (Claude, Bob, Codex) to plan and implement work from a written spec.",
+        "# Spektacular\n\n> Spektacular — Spek for short. The specs it produces are called speks.\n\nAgent-agnostic CLI tool for spec-driven development, providing skills and integrations for coding agents (Claude, Bob, Codex) to plan and implement work from a written spek.",
+      ],
+      [
+        "## What is Spektacular?\n\nSpektacular is a self-contained Go binary",
+        "## What is Spektacular?\n\nSpek is a self-contained Go binary",
+      ],
       ["Spektacular turns it into", "Spek turns it into"],
-      ["You write a markdown spec (requirements", "You write a markdown spek (requirements"],
-      ["Spektacular is a single self-contained Go binary.", "Spek is a single self-contained Go binary."],
+      [
+        "You write a markdown spec (requirements",
+        "You write a markdown spek (requirements",
+      ],
+      [
+        "Spektacular is a single self-contained Go binary.",
+        "Spek is a single self-contained Go binary.",
+      ],
       ["run the Spektacular workflows", "run the Spek workflows"],
-      ["Spec, plan, and implement each run", "Spec, plan, and implement each run"],
+      [
+        "Spec, plan, and implement each run",
+        "Spec, plan, and implement each run",
+      ],
       ["Spektacular hands the agent", "Spek hands the agent"],
-      ["referenced by the spec that needs it, so specs stay readable", "referenced by the spek that needs it, so speks stay readable"],
-      ["Spektacular follows a three-stage workflow", "Spek follows a three-stage workflow"],
-      ["You write a markdown specification; Spek turns it into", "You write a markdown spek; Spek turns it into"],
+      [
+        "referenced by the spec that needs it, so specs stay readable",
+        "referenced by the spek that needs it, so speks stay readable",
+      ],
+      [
+        "Spektacular follows a three-stage workflow",
+        "Spek follows a three-stage workflow",
+      ],
+      [
+        "You write a markdown specification; Spek turns it into",
+        "You write a markdown spek; Spek turns it into",
+      ],
       ["scaffolds one from a template", "scaffolds one from a template"],
       ["reading Spektacular's state files", "reading Spek's state files"],
-      ["across the spec file, the plan directory and the changelog record", "across the spek file, the plan directory and the changelog record"],
+      [
+        "across the spec file, the plan directory and the changelog record",
+        "across the spek file, the plan directory and the changelog record",
+      ],
       ["Spec names are normalised", "Spek names are normalised"],
       ["Specs are plain markdown", "Speks are plain markdown"],
       ["full walkthrough and spec format", "full walkthrough and spek format"],
       ["Spektacular ships with three", "Spek ships with three"],
-      ["so the Spektacular agent rules take effect", "so the Spek agent rules take effect"],
-      ["backing the spec, plan, and knowledge stores", "backing the spek, plan, and knowledge stores"],
+      [
+        "so the Spektacular agent rules take effect",
+        "so the Spek agent rules take effect",
+      ],
+      [
+        "backing the spec, plan, and knowledge stores",
+        "backing the spek, plan, and knowledge stores",
+      ],
       ["By default Spektacular reads", "By default Spek reads"],
       ["In a Spektacular-initialised repo", "In a Spek-initialised repo"],
       ["A repo's Spektacular files", "A repo's Spek files"],
-      ["Spektacular always runs against a project", "Spek always runs against a project"],
+      [
+        "Spektacular always runs against a project",
+        "Spek always runs against a project",
+      ],
       ["Spektacular's files go inside", "Spek's files go inside"],
-      ["git repository that Spektacular clones", "git repository that Spek clones"],
+      [
+        "git repository that Spektacular clones",
+        "git repository that Spek clones",
+      ],
       ["coding agent Spektacular drives", "coding agent Spek drives"],
-      ["location of each repo's Spektacular files", "location of each repo's Spek files"],
-      ["the central `spec`, `plan`, and `changelog` stores", "the central `spec`, `plan`, and `changelog` stores"],
+      [
+        "location of each repo's Spektacular files",
+        "location of each repo's Spek files",
+      ],
+      [
+        "the central `spec`, `plan`, and `changelog` stores",
+        "the central `spec`, `plan`, and `changelog` stores",
+      ],
       ["written by Spektacular", "written by Spektacular"],
       ["new Spektacular", "new Spektacular"],
-      ["until the project is brought up to date", "until the project is brought up to date"],
-      ["older than the running Spektacular", "older than the running Spektacular"],
-      ["Settings written by a *newer* Spektacular", "Settings written by a *newer* Spektacular"],
+      [
+        "until the project is brought up to date",
+        "until the project is brought up to date",
+      ],
+      [
+        "older than the running Spektacular",
+        "older than the running Spektacular",
+      ],
+      [
+        "Settings written by a *newer* Spektacular",
+        "Settings written by a *newer* Spektacular",
+      ],
       ["Spektacular's own listing", "Spek's own listing"],
       ["Spektacular has two layers", "Spek has two layers"],
       ["none of Spektacular's internal", "none of Spek's internal"],
     ],
     "getting-started.md": [
-      ["_Take a feature from a rough idea to working code using a Spektacular spec,", "_Take a feature from a rough idea to working code using a Spektacular (Spek) spek,"],
-      ["In this tutorial you will see how Spektacular's", "In this tutorial you will see how Spek's"],
+      [
+        "_Take a feature from a rough idea to working code using a Spektacular spec,",
+        "_Take a feature from a rough idea to working code using a Spektacular (Spek) spek,",
+      ],
+      [
+        "In this tutorial you will see how Spektacular's",
+        "In this tutorial you will see how Spek's",
+      ],
       ["coding agent Spektacular supports", "coding agent Spek supports"],
-      ["## What is Spektacular\n\nSpektacular is a CLI", "## What is Spektacular\n\nSpek is a CLI"],
-      ["store your specs and knowledge base", "store your speks and knowledge base"],
+      [
+        "## What is Spektacular\n\nSpektacular is a CLI",
+        "## What is Spektacular\n\nSpek is a CLI",
+      ],
+      [
+        "store your specs and knowledge base",
+        "store your speks and knowledge base",
+      ],
       ["# scaffold a new specification", "# scaffold a new specification"],
       ["turn a spec into", "turn a spek into"],
       ["agent state: the spec, the plan", "agent state: the spek, the plan"],
-      ["### Step 2: Install Spektacular\n\nSpektacular is a Go binary", "### Step 2: Install Spektacular\n\nSpek is a Go binary"],
+      [
+        "### Step 2: Install Spektacular\n\nSpektacular is a Go binary",
+        "### Step 2: Install Spektacular\n\nSpek is a Go binary",
+      ],
       ["Spektacular drives an external", "Spek drives an external"],
-      ["outside Spektacular before continuing", "outside Spek before continuing"],
+      [
+        "outside Spektacular before continuing",
+        "outside Spek before continuing",
+      ],
       ["use Spektacular with", "use Spek with"],
       ["want Spektacular to\noperate on", "want Spek to\noperate on"],
       ["so Spektacular knows", "so Spek knows"],
       ["The specification in Spektacular\nserves", "The spek in Spek\nserves"],
-      ["The specification in the Spektacular workflow", "The spek in the Spek workflow"],
-      ["The content in these sections guides", "The content in these sections guides"],
+      [
+        "The specification in the Spektacular workflow",
+        "The spek in the Spek workflow",
+      ],
+      [
+        "The content in these sections guides",
+        "The content in these sections guides",
+      ],
       ["the specification pays off", "the spek pays off"],
       ["The spec also serves", "The spek also serves"],
       ["Scaffold a new specification", "Scaffold a new spek"],
-      ["Spektacular will automatically create", "Spek will automatically create"],
+      [
+        "Spektacular will automatically create",
+        "Spek will automatically create",
+      ],
       ["Spektacular writes all temporary", "Spek writes all temporary"],
       ["file name for the spec", "file name for the spek"],
       ["The way Spektacular works", "The way Spek works"],
@@ -227,7 +310,10 @@ export function introduceSpekStyle(project: string, target: string, content: str
       ["final specification or plan", "final spek or plan"],
       ["current specification and the answers", "current spek and the answers"],
       ["final section of the specification", "final section of the spek"],
-      ["verify the specification before writing", "verify the spek before writing"],
+      [
+        "verify the specification before writing",
+        "verify the spek before writing",
+      ],
       ["pass over the specification", "pass over the spek"],
       ["the specification is well formed", "the spek is well formed"],
       ["generate your full specification", "generate your full spek"],
@@ -243,13 +329,25 @@ export function introduceSpekStyle(project: string, target: string, content: str
       ["As with the specification", "As with the spek"],
       ["name of the specification", "name of the spek"],
       ["from the specification or the context", "from the spek or the context"],
-      ["retrieved from the specification and the context", "retrieved from the spek and the context"],
-      ["The spec defines no success metrics", "The spec defines no success metrics"],
-      ["using the Spec Driven Development workflow", "using the Spec Driven Development workflow"],
+      [
+        "retrieved from the specification and the context",
+        "retrieved from the spek and the context",
+      ],
+      [
+        "The spec defines no success metrics",
+        "The spec defines no success metrics",
+      ],
+      [
+        "using the Spec Driven Development workflow",
+        "using the Spec Driven Development workflow",
+      ],
       ["The specification and plan", "The spek and plan"],
     ],
     "unknown-criteria.md": [
-      ["In the first case, I can use the Spektacular workflow", "In the first case, I can use the Spektacular (Spek) workflow"],
+      [
+        "In the first case, I can use the Spektacular workflow",
+        "In the first case, I can use the Spektacular (Spek) workflow",
+      ],
       ["a bug in Spektacular when", "a bug in Spek when"],
       ["The way that Spektacular works", "The way that Spek works"],
       ["how Spektacular works", "how Spek works"],
@@ -260,11 +358,17 @@ export function introduceSpekStyle(project: string, target: string, content: str
       ["this\nspecification", "this\nspek"],
       ["write a\nspecification for", "write a\nspek for"],
       ["two new specifications", "two new speks"],
-      ["diagnostic information that Spektacular produces", "diagnostic information that Spek produces"],
+      [
+        "diagnostic information that Spektacular produces",
+        "diagnostic information that Spek produces",
+      ],
       ["share these specifications", "share these speks"],
       ["write a specification for the work", "write a spek for the work"],
       ["a specification and a plan", "a spek and a plan"],
-      ["turns the activity of writing the specification", "turns the activity of writing the spek"],
+      [
+        "turns the activity of writing the specification",
+        "turns the activity of writing the spek",
+      ],
       ["write a specification", "write a spek"],
       ["specification and plan", "spek and plan"],
     ],
@@ -287,7 +391,9 @@ export function syncedHeader(p: ProjectSync, f: SyncedFile): string {
   let header = `> **Synced from ${r.repo}.** This page is pulled from [${r.owner}/${r.repo}@${r.branch}](${canonical}) during the docs build. Edit the canonical source in the ${r.repo} repository.`;
   const site = f.siteBase ?? p.canonicalSite;
   if (site) {
-    const pageUrl = f.sitePath ? `${site.replace(/\/$/, "")}${f.sitePath}` : site;
+    const pageUrl = f.sitePath
+      ? `${site.replace(/\/$/, "")}${f.sitePath}`
+      : site;
     const host = site.replace(/^https?:\/\//, "").replace(/\/$/, "");
     header += `\n>\n> Also published at [${host}](${pageUrl}), which is the canonical copy of this documentation.`;
   }
@@ -303,7 +409,11 @@ export function syncedHeader(p: ProjectSync, f: SyncedFile): string {
  *  - relative image sources become raw.githubusercontent URLs
  *  - absolute URLs and pure anchors are left untouched
  */
-export function rewriteLinks(content: string, p: ProjectSync, f?: SyncedFile): string {
+export function rewriteLinks(
+  content: string,
+  p: ProjectSync,
+  f?: SyncedFile
+): string {
   const syncedRoutes = new Map<string, string>();
   for (const s of p.files) {
     syncedRoutes.set(
@@ -363,14 +473,18 @@ async function copyAssets(
     const rel = img.replace(/^\/+/, "");
     const dest = path.resolve(outDir, rel);
     if (!dest.startsWith(path.resolve(outDir) + path.sep)) {
-      console.warn(`sync-sibling-docs: refusing to copy ${img} outside ${outDir}`);
+      console.warn(
+        `sync-sibling-docs: refusing to copy ${img} outside ${outDir}`
+      );
       rewritten.set(img, `${f.siteBase ?? ""}${img}`);
       continue;
     }
     const source = path.posix.join(f.assetsRoot ?? "", rel);
     const bytes = await fetchBinary(r, source);
     if (bytes === null) {
-      console.warn(`sync-sibling-docs: ${r.owner}/${r.repo}@${r.branch}/${source} not found — linking to ${f.siteBase}${img}`);
+      console.warn(
+        `sync-sibling-docs: ${r.owner}/${r.repo}@${r.branch}/${source} not found — linking to ${f.siteBase}${img}`
+      );
       rewritten.set(img, `${f.siteBase ?? ""}${img}`);
       continue;
     }
@@ -381,7 +495,12 @@ async function copyAssets(
   return rewritten;
 }
 
-async function renderPage(p: ProjectSync, f: SyncedFile, body: string, outDir: string): Promise<string> {
+async function renderPage(
+  p: ProjectSync,
+  f: SyncedFile,
+  body: string,
+  outDir: string
+): Promise<string> {
   if (f.format === "mdx") {
     // First pass collects the image list; assets are copied and the src
     // values are rewritten in a second pass with the resolved locations.
@@ -389,7 +508,7 @@ async function renderPage(p: ProjectSync, f: SyncedFile, body: string, outDir: s
     const assets = await copyAssets(p, f, probe.images, outDir);
     const conv = convertMdxToMarkdown(body, {
       siteBase: f.siteBase ?? "",
-      rewriteImage: (src) => assets.get(src) ?? src.replace(/^\//, ""),
+      rewriteImage: src => assets.get(src) ?? src.replace(/^\//, ""),
     });
     for (const note of conv.notes) {
       console.warn(`sync-sibling-docs: ${p.project}/${f.target}: ${note}`);
@@ -414,9 +533,15 @@ async function main() {
         continue;
       }
       const page = await renderPage(p, f, body, outDir);
-      const out = syncedHeader(p, f) + normalizeFences(scrubLegacyBranding(introduceSpekStyle(p.project, f.target, page)));
+      const out =
+        syncedHeader(p, f) +
+        normalizeFences(
+          scrubLegacyBranding(introduceSpekStyle(p.project, f.target, page))
+        );
       fs.writeFileSync(path.join(outDir, f.target), out);
-      console.log(`synced ${p.project}/${f.target} <- ${r.owner}/${r.repo}/${f.source}`);
+      console.log(
+        `synced ${p.project}/${f.target} <- ${r.owner}/${r.repo}/${f.source}`
+      );
     }
   }
 }
@@ -429,7 +554,7 @@ const isDirectRun =
   /sync-sibling-docs\.ts$/.test(process.argv[1] ?? "");
 
 if (isDirectRun) {
-  main().catch((err) => {
+  main().catch(err => {
     console.error(err);
     process.exit(1);
   });
diff --git a/scripts/update-meeting-recordings.ts b/scripts/update-meeting-recordings.ts
index 529e5a2..889a4ae 100644
--- a/scripts/update-meeting-recordings.ts
+++ b/scripts/update-meeting-recordings.ts
@@ -1,121 +1,159 @@
-import fs from 'fs'
-import path from 'path'
+import fs from "fs";
+import path from "path";
 
-const DATA_PATH = path.join(process.cwd(), 'data', 'meeting-recordings.json')
-const FEED_URL = 'https://www.youtube.com/feeds/videos.xml?channel_id=UCIA3fKJFv2nLoG6vKK65xLg'
-const CHANNEL_ID = 'UCIA3fKJFv2nLoG6vKK65xLg'
-const TITLE_RE = /community meeting|community call|meeting recording/i
-const VIDEO_ID_RE = /^[A-Za-z0-9_-]{11}$/
+const DATA_PATH = path.join(process.cwd(), "data", "meeting-recordings.json");
+const FEED_URL =
+  "https://www.youtube.com/feeds/videos.xml?channel_id=UCIA3fKJFv2nLoG6vKK65xLg";
+const CHANNEL_ID = "UCIA3fKJFv2nLoG6vKK65xLg";
+const TITLE_RE = /community meeting|community call|meeting recording/i;
+const VIDEO_ID_RE = /^[A-Za-z0-9_-]{11}$/;
 
 type Recording = {
-  id: string
-  title: string
-  publishedAt: string
-  updatedAt?: string
-  url: string
-  thumbnail: string
-  description?: string
-  duration?: string
-}
+  id: string;
+  title: string;
+  publishedAt: string;
+  updatedAt?: string;
+  url: string;
+  thumbnail: string;
+  description?: string;
+  duration?: string;
+};
 
 type Store = {
-  updatedAt: string
-  source: string
-  channelId: string
-  recordings: Recording[]
-}
+  updatedAt: string;
+  source: string;
+  channelId: string;
+  recordings: Recording[];
+};
 
 function textBetween(input: string, tag: string): string | undefined {
-  const match = new RegExp(`<${tag}[^>]*>([\\s\\S]*?)</${tag}>`).exec(input)
-  return match?.[1]?.trim()
+  const match = new RegExp(`<${tag}[^>]*>([\\s\\S]*?)</${tag}>`).exec(input);
+  return match?.[1]?.trim();
 }
 
 function attr(input: string, tag: string, name: string): string | undefined {
-  const match = new RegExp(`<${tag}[^>]*\\s${name}="([^"]+)"[^>]*>`).exec(input)
-  return match?.[1]
+  const match = new RegExp(`<${tag}[^>]*\\s${name}="([^"]+)"[^>]*>`).exec(
+    input
+  );
+  return match?.[1];
 }
 
-function decodeXml(input = ''): string {
+function decodeXml(input = ""): string {
   // Decode &amp; LAST: decoding it first would fully decode double-encoded
   // content (&amp;lt; -> &lt; -> <), reintroducing escaped markup.
   return input
-    .replace(/&lt;/g, '<')
-    .replace(/&gt;/g, '>')
+    .replace(/&lt;/g, "<")
+    .replace(/&gt;/g, ">")
     .replace(/&quot;/g, '"')
     .replace(/&#39;/g, "'")
-    .replace(/&amp;/g, '&')
+    .replace(/&amp;/g, "&");
 }
 
 // Accept only https URLs on an expected host; anything else is dropped so a
 // malformed/spoofed feed entry cannot persist an arbitrary URL into the
 // committed snapshot (consumed by iframe/img/href sinks in MeetingsPage).
-function safeHttpsUrl(raw: string | undefined, isAllowedHost: (host: string) => boolean): string | undefined {
-  if (!raw) return undefined
+function safeHttpsUrl(
+  raw: string | undefined,
+  isAllowedHost: (host: string) => boolean
+): string | undefined {
+  if (!raw) return undefined;
   try {
-    const url = new URL(raw)
-    if (url.protocol === 'https:' && isAllowedHost(url.hostname)) return url.href
+    const url = new URL(raw);
+    if (url.protocol === "https:" && isAllowedHost(url.hostname))
+      return url.href;
   } catch {
     // not a URL — fall through to undefined
   }
-  return undefined
+  return undefined;
 }
 
 function parseFeed(xml: string): Recording[] {
-  const entries = xml.match(/<entry>[\s\S]*?<\/entry>/g) ?? []
+  const entries = xml.match(/<entry>[\s\S]*?<\/entry>/g) ?? [];
   return entries.flatMap(entry => {
-    const id = textBetween(entry, 'yt:videoId')
-    const title = decodeXml(textBetween(entry, 'title'))
+    const id = textBetween(entry, "yt:videoId");
+    const title = decodeXml(textBetween(entry, "title"));
     // id is interpolated raw into an embed iframe src — enforce the exact
     // YouTube video-id shape and drop anything else.
-    if (!id || !VIDEO_ID_RE.test(id) || !title || !TITLE_RE.test(title)) return []
-
-    return [{
-      id,
-      title,
-      publishedAt: textBetween(entry, 'published') ?? '',
-      updatedAt: textBetween(entry, 'updated'),
-      url: safeHttpsUrl(attr(entry, 'link', 'href'), host => host === 'www.youtube.com' || host === 'youtube.com' || host === 'youtu.be')
-        ?? `https://www.youtube.com/watch?v=${id}`,
-      thumbnail: safeHttpsUrl(
-        attr(entry, 'media:thumbnail', 'url')?.replace('https://i1.ytimg.com/', 'https://i.ytimg.com/'),
-        host => host === 'i.ytimg.com' || host.endsWith('.ytimg.com')
-      ) ?? `https://i.ytimg.com/vi/${id}/hqdefault.jpg`,
-      description: decodeXml(textBetween(entry, 'media:description')),
-    }]
-  })
+    if (!id || !VIDEO_ID_RE.test(id) || !title || !TITLE_RE.test(title))
+      return [];
+
+    return [
+      {
+        id,
+        title,
+        publishedAt: textBetween(entry, "published") ?? "",
+        updatedAt: textBetween(entry, "updated"),
+        url:
+          safeHttpsUrl(
+            attr(entry, "link", "href"),
+            host =>
+              host === "www.youtube.com" ||
+              host === "youtube.com" ||
+              host === "youtu.be"
+          ) ?? `https://www.youtube.com/watch?v=${id}`,
+        thumbnail:
+          safeHttpsUrl(
+            attr(entry, "media:thumbnail", "url")?.replace(
+              "https://i1.ytimg.com/",
+              "https://i.ytimg.com/"
+            ),
+            host => host === "i.ytimg.com" || host.endsWith(".ytimg.com")
+          ) ?? `https://i.ytimg.com/vi/${id}/hqdefault.jpg`,
+        description: decodeXml(textBetween(entry, "media:description")),
+      },
+    ];
+  });
 }
 
 function readExisting(): Store {
   try {
-    return JSON.parse(fs.readFileSync(DATA_PATH, 'utf8')) as Store
+    return JSON.parse(fs.readFileSync(DATA_PATH, "utf8")) as Store;
   } catch {
-    return { updatedAt: new Date(0).toISOString(), source: FEED_URL, channelId: CHANNEL_ID, recordings: [] }
+    return {
+      updatedAt: new Date(0).toISOString(),
+      source: FEED_URL,
+      channelId: CHANNEL_ID,
+      recordings: [],
+    };
   }
 }
 
 async function main() {
-  const existing = readExisting()
-  let fetched: Recording[] = []
+  const existing = readExisting();
+  let fetched: Recording[] = [];
 
   try {
-    const response = await fetch(FEED_URL)
-    if (!response.ok) throw new Error(`YouTube feed returned ${response.status}`)
-    fetched = parseFeed(await response.text())
+    const response = await fetch(FEED_URL);
+    if (!response.ok)
+      throw new Error(`YouTube feed returned ${response.status}`);
+    fetched = parseFeed(await response.text());
   } catch (error) {
-    console.warn(`meeting recordings feed unavailable; keeping committed data: ${error instanceof Error ? error.message : String(error)}`)
+    console.warn(
+      `meeting recordings feed unavailable; keeping committed data: ${error instanceof Error ? error.message : String(error)}`
+    );
   }
 
-  const byId = new Map<string, Recording>()
-  for (const recording of existing.recordings) byId.set(recording.id, recording)
-  for (const recording of fetched) byId.set(recording.id, { ...byId.get(recording.id), ...recording })
-
-  const recordings = [...byId.values()].sort((a, b) => Date.parse(b.publishedAt) - Date.parse(a.publishedAt))
-  const existingStable = JSON.stringify(existing.recordings)
-  const nextStable = JSON.stringify(recordings)
-
-  if (existingStable === nextStable && existing.source === FEED_URL && existing.channelId === CHANNEL_ID) {
-    console.log(`meeting recordings: ${existing.recordings.length} (unchanged)`)
-    return
+  const byId = new Map<string, Recording>();
+  for (const recording of existing.recordings)
+    byId.set(recording.id, recording);
+  for (const recording of fetched)
+    byId.set(recording.id, { ...byId.get(recording.id), ...recording });
+
+  const recordings = [...byId.values()].sort(
+    (a, b) => Date.parse(b.publishedAt) - Date.parse(a.publishedAt)
+  );
+  const existingStable = JSON.stringify(existing.recordings);
+  const nextStable = JSON.stringify(recordings);
+
+  if (
+    existingStable === nextStable &&
+    existing.source === FEED_URL &&
+    existing.channelId === CHANNEL_ID
+  ) {
+    console.log(
+      `meeting recordings: ${existing.recordings.length} (unchanged)`
+    );
+    return;
   }
 
   const next: Store = {
@@ -123,10 +161,10 @@ async function main() {
     source: FEED_URL,
     channelId: CHANNEL_ID,
     recordings,
-  }
+  };
 
-  fs.writeFileSync(DATA_PATH, `${JSON.stringify(next, null, 2)}\n`)
-  console.log(`meeting recordings: ${next.recordings.length}`)
+  fs.writeFileSync(DATA_PATH, `${JSON.stringify(next, null, 2)}\n`);
+  console.log(`meeting recordings: ${next.recordings.length}`);
 }
 
-void main()
+void main();
diff --git a/src/__tests__/DocsFooter.behavior.test.tsx b/src/__tests__/DocsFooter.behavior.test.tsx
index 2e41fa5..e948eed 100644
--- a/src/__tests__/DocsFooter.behavior.test.tsx
+++ b/src/__tests__/DocsFooter.behavior.test.tsx
@@ -54,7 +54,9 @@ import DocsFooter from "@/components/docs/DocsFooter";
 let alertSpy: ReturnType<typeof vi.spyOn>;
 
 function linkByHref(href: string): HTMLElement[] {
-  return screen.getAllByRole("link").filter((a) => a.getAttribute("href") === href);
+  return screen
+    .getAllByRole("link")
+    .filter(a => a.getAttribute("href") === href);
 }
 
 beforeEach(() => {
@@ -72,15 +74,18 @@ describe("DocsFooter content", () => {
     render(<DocsFooter />);
 
     expect(
-      screen.getByText(/Hive Commons is an open source home for projects/),
+      screen.getByText(/Hive Commons is an open source home for projects/)
     ).toBeTruthy();
-    for (const heading of ["Projects", "Get started", "Community", "Resources"]) {
+    for (const heading of [
+      "Projects",
+      "Get started",
+      "Community",
+      "Resources",
+    ]) {
       expect(screen.getByRole("heading", { name: heading })).toBeTruthy();
     }
     expect(
-      screen.getByText(
-        new RegExp(`© ${new Date().getFullYear()} Hive Commons`),
-      ),
+      screen.getByText(new RegExp(`© ${new Date().getFullYear()} Hive Commons`))
     ).toBeTruthy();
   });
 
@@ -95,9 +100,9 @@ describe("DocsFooter content", () => {
       "spektacular",
       "dibs",
     ]) {
-      expect(
-        linkByHref(`/docs/${project}/overview/introduction`),
-      ).toHaveLength(1);
+      expect(linkByHref(`/docs/${project}/overview/introduction`)).toHaveLength(
+        1
+      );
     }
   });
 
@@ -117,7 +122,9 @@ describe("DocsFooter content", () => {
       }
     }
     expect(
-      screen.getByRole("link", { name: "Hive Commons on GitHub" }).getAttribute("href"),
+      screen
+        .getByRole("link", { name: "Hive Commons on GitHub" })
+        .getAttribute("href")
     ).toBe("https://github.com/hivecommons");
   });
 
@@ -145,7 +152,7 @@ describe("DocsFooter newsletter form", () => {
     fireEvent.change(input, { target: { value: "bee@example.com" } });
     fireEvent.submit(input.closest("form")!);
     expect(alertSpy).toHaveBeenCalledWith(
-      "Subscriptions are not available yet. Please try again later.",
+      "Subscriptions are not available yet. Please try again later."
     );
     expect(input.value).toBe("");
   });
diff --git a/src/__tests__/DocsFooter.copy.test.ts b/src/__tests__/DocsFooter.copy.test.ts
index 20930b8..b4548df 100644
--- a/src/__tests__/DocsFooter.copy.test.ts
+++ b/src/__tests__/DocsFooter.copy.test.ts
@@ -1,36 +1,43 @@
-import fs from 'fs'
-import path from 'path'
-import { describe, expect, it } from 'vitest'
+import fs from "fs";
+import path from "path";
+import { describe, expect, it } from "vitest";
 
-const footerPath = path.join(process.cwd(), 'src/components/docs/DocsFooter.tsx')
+const footerPath = path.join(
+  process.cwd(),
+  "src/components/docs/DocsFooter.tsx"
+);
 
-describe('DocsFooter copy and links', () => {
-  const footer = fs.readFileSync(footerPath, 'utf8')
+describe("DocsFooter copy and links", () => {
+  const footer = fs.readFileSync(footerPath, "utf8");
 
-  it('uses Hive Commons project copy instead of KubeStellar Console leftovers', () => {
-    expect(footer).toContain('Hive Commons is an open source home for projects')
-    expect(footer).not.toMatch(/Console|MCP server|A2A agent|Kubernetes orchestration|multi-cluster management/i)
-  })
+  it("uses Hive Commons project copy instead of KubeStellar Console leftovers", () => {
+    expect(footer).toContain(
+      "Hive Commons is an open source home for projects"
+    );
+    expect(footer).not.toMatch(
+      /Console|MCP server|A2A agent|Kubernetes orchestration|multi-cluster management/i
+    );
+  });
 
-  it('links to Hive Commons projects and community resources', () => {
-    expect(footer).toContain('href="/docs/hive/overview/introduction"')
-    expect(footer).toContain('href="/docs/hotshot/overview/introduction"')
-    expect(footer).toContain('href="/docs/pluk/overview/introduction"')
-    expect(footer).toContain('href="/docs/rationguard/overview/introduction"')
-    expect(footer).toContain('href="/docs/promptargs/overview/introduction"')
-    expect(footer).toContain('href="/docs/spektacular/overview/introduction"')
-    expect(footer).toContain('href="/docs/dibs/overview/introduction"')
-    expect(footer).toContain('href="/docs/community/meetings"')
-    expect(footer).toContain('href="https://hive.hivecommons.dev"')
-    expect(footer).toContain('href="https://hivecommons.dev/discord"')
-    expect(footer).toContain('href="https://hivecommons.dev/tv"')
-  })
+  it("links to Hive Commons projects and community resources", () => {
+    expect(footer).toContain('href="/docs/hive/overview/introduction"');
+    expect(footer).toContain('href="/docs/hotshot/overview/introduction"');
+    expect(footer).toContain('href="/docs/pluk/overview/introduction"');
+    expect(footer).toContain('href="/docs/rationguard/overview/introduction"');
+    expect(footer).toContain('href="/docs/promptargs/overview/introduction"');
+    expect(footer).toContain('href="/docs/spektacular/overview/introduction"');
+    expect(footer).toContain('href="/docs/dibs/overview/introduction"');
+    expect(footer).toContain('href="/docs/community/meetings"');
+    expect(footer).toContain('href="https://hive.hivecommons.dev"');
+    expect(footer).toContain('href="https://hivecommons.dev/discord"');
+    expect(footer).toContain('href="https://hivecommons.dev/tv"');
+  });
 
-  it('keeps social links accessible and removes unsupported networks', () => {
-    expect(footer).toContain('aria-label="Hive Commons on GitHub"')
-    expect(footer).toContain('aria-label="Hive Commons on YouTube"')
-    expect(footer).toContain('aria-label="Hive Commons Discord"')
-    expect(footer).not.toContain('aria-label="X (Twitter)"')
-    expect(footer).not.toContain('aria-label="LinkedIn"')
-  })
-})
+  it("keeps social links accessible and removes unsupported networks", () => {
+    expect(footer).toContain('aria-label="Hive Commons on GitHub"');
+    expect(footer).toContain('aria-label="Hive Commons on YouTube"');
+    expect(footer).toContain('aria-label="Hive Commons Discord"');
+    expect(footer).not.toContain('aria-label="X (Twitter)"');
+    expect(footer).not.toContain('aria-label="LinkedIn"');
+  });
+});
diff --git a/src/__tests__/ErrorFallbackUI.behavior.test.tsx b/src/__tests__/ErrorFallbackUI.behavior.test.tsx
index 51416d4..f91fc8d 100644
--- a/src/__tests__/ErrorFallbackUI.behavior.test.tsx
+++ b/src/__tests__/ErrorFallbackUI.behavior.test.tsx
@@ -24,13 +24,11 @@ describe("ErrorFallbackUI", () => {
   it("renders the branded error card", () => {
     render(<ErrorFallbackUI reset={() => {}} />);
     expect(
-      screen.getByRole("heading", { name: "Something went wrong" }),
+      screen.getByRole("heading", { name: "Something went wrong" })
     ).toBeTruthy();
     expect(screen.getByText("Hive Commons Docs")).toBeTruthy();
     expect(screen.getByAltText("Hive Commons logo")).toBeTruthy();
-    expect(
-      screen.getByText(/temporary runtime error/),
-    ).toBeTruthy();
+    expect(screen.getByText(/temporary runtime error/)).toBeTruthy();
   });
 
   it("invokes reset when Try again is clicked", () => {
@@ -48,7 +46,7 @@ describe("ErrorFallbackUI", () => {
     const hrefs = new Map(
       screen
         .getAllByRole("link")
-        .map((a) => [a.textContent, a.getAttribute("href")]),
+        .map(a => [a.textContent, a.getAttribute("href")])
     );
     expect(hrefs.get("Hive intro")).toBe("/docs/hive/readme");
     expect(hrefs.get("Docs home")).toBe("/docs");
@@ -72,7 +70,7 @@ describe("app error boundaries", () => {
 
   it("global-error.tsx renders a full html document around the fallback", () => {
     const html = renderToString(
-      <GlobalError error={new Error("boom")} reset={() => {}} />,
+      <GlobalError error={new Error("boom")} reset={() => {}} />
     );
     expect(html).toContain("<html");
     expect(html).toContain("Something went wrong");
diff --git a/src/__tests__/Footer.behavior.test.tsx b/src/__tests__/Footer.behavior.test.tsx
index 5e884e6..276ce9f 100644
--- a/src/__tests__/Footer.behavior.test.tsx
+++ b/src/__tests__/Footer.behavior.test.tsx
@@ -16,10 +16,18 @@ import en from "../../messages/en.json";
 
 vi.mock("@/components/index", () => ({
   GridLines: (props: { horizontalLines?: number; verticalLines?: number }) => (
-    <div data-testid="grid-lines" data-h={props.horizontalLines} data-v={props.verticalLines} />
+    <div
+      data-testid="grid-lines"
+      data-h={props.horizontalLines}
+      data-v={props.verticalLines}
+    />
   ),
   StarField: (props: { density?: string; cometCount?: number }) => (
-    <div data-testid="star-field" data-density={props.density} data-comets={props.cometCount} />
+    <div
+      data-testid="star-field"
+      data-density={props.density}
+      data-comets={props.cometCount}
+    />
   ),
 }));
 
@@ -40,14 +48,15 @@ vi.mock("next-intl", async () => {
     footer: Record<string, string>;
   };
   return {
-    useTranslations: (ns: string) => (key: string, params?: Record<string, unknown>) => {
-      const table = ns === "footer" ? messages.footer : {};
-      let msg = table[key] ?? key;
-      for (const [k, v] of Object.entries(params ?? {})) {
-        msg = msg.replace(`{${k}}`, String(v));
-      }
-      return msg;
-    },
+    useTranslations:
+      (ns: string) => (key: string, params?: Record<string, unknown>) => {
+        const table = ns === "footer" ? messages.footer : {};
+        let msg = table[key] ?? key;
+        for (const [k, v] of Object.entries(params ?? {})) {
+          msg = msg.replace(`{${k}}`, String(v));
+        }
+        return msg;
+      },
   };
 });
 
@@ -102,7 +111,7 @@ describe("Footer content", () => {
       name: footerMsgs.releasesNotes,
     });
     expect(releaseLink.getAttribute("href")).toBe(
-      "https://github.com/hivecommons/hive/releases",
+      "https://github.com/hivecommons/hive/releases"
     );
     expect(releaseLink.getAttribute("target")).toBe("_blank");
     expect(releaseLink.getAttribute("rel")).toBe("noopener noreferrer");
@@ -112,22 +121,26 @@ describe("Footer content", () => {
     expect(liveDemo.getAttribute("rel")).toBe("noopener noreferrer");
 
     expect(
-      screen.getByRole("link", { name: footerMsgs.news }).getAttribute("href"),
+      screen.getByRole("link", { name: footerMsgs.news }).getAttribute("href")
     ).toBe("/docs/news/latest-news");
     // getLocalizedUrl passes relative URLs through unchanged
     expect(
-      screen.getByRole("link", { name: footerMsgs.overview }).getAttribute("href"),
+      screen
+        .getByRole("link", { name: footerMsgs.overview })
+        .getAttribute("href")
     ).toBe("/docs");
 
     const socials = screen
       .getAllByRole("link")
-      .filter((a) => a.getAttribute("href") === "https://github.com/hivecommons");
+      .filter(a => a.getAttribute("href") === "https://github.com/hivecommons");
     expect(socials.length).toBeGreaterThanOrEqual(4);
   });
 
   it("renders the background animation layers", () => {
     render(<Footer />);
-    expect(screen.getByTestId("star-field").getAttribute("data-density")).toBe("low");
+    expect(screen.getByTestId("star-field").getAttribute("data-density")).toBe(
+      "low"
+    );
     expect(screen.getByTestId("grid-lines").getAttribute("data-h")).toBe("21");
     expect(screen.getByTestId("grid-lines").getAttribute("data-v")).toBe("15");
   });
@@ -135,7 +148,9 @@ describe("Footer content", () => {
 
 describe("newsletter subscribe form", () => {
   function emailInput(): HTMLInputElement {
-    return screen.getByPlaceholderText(footerMsgs.emailPlaceholder) as HTMLInputElement;
+    return screen.getByPlaceholderText(
+      footerMsgs.emailPlaceholder
+    ) as HTMLInputElement;
   }
   function form(): HTMLFormElement {
     return document.getElementById("newsletter-form") as HTMLFormElement;
@@ -164,7 +179,7 @@ describe("newsletter subscribe form", () => {
     fireEvent.submit(form());
     expect(alertSpy).toHaveBeenCalledTimes(1);
     expect(alertSpy).toHaveBeenCalledWith(
-      "Subscriptions are not available yet. Please try again later.",
+      "Subscriptions are not available yet. Please try again later."
     );
     expect(emailInput().value).toBe("");
   });
diff --git a/src/__tests__/LanguageSwitcher.behavior.test.tsx b/src/__tests__/LanguageSwitcher.behavior.test.tsx
index 14d7a76..8274ba1 100644
--- a/src/__tests__/LanguageSwitcher.behavior.test.tsx
+++ b/src/__tests__/LanguageSwitcher.behavior.test.tsx
@@ -12,7 +12,13 @@
 //  - LanguageSwitcherMinimal / LanguageSwitcherFull convenience exports
 import React from "react";
 import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
-import { act, cleanup, fireEvent, render, screen } from "@testing-library/react";
+import {
+  act,
+  cleanup,
+  fireEvent,
+  render,
+  screen,
+} from "@testing-library/react";
 
 import { locales, localeNames } from "@/i18n/settings";
 
diff --git a/src/__tests__/MeetingsPage.behavior.test.tsx b/src/__tests__/MeetingsPage.behavior.test.tsx
index 6e4a809..e1663d4 100644
--- a/src/__tests__/MeetingsPage.behavior.test.tsx
+++ b/src/__tests__/MeetingsPage.behavior.test.tsx
@@ -11,268 +11,307 @@
 //  - recordings from committed JSON render and clicking play swaps the
 //    thumbnail button for a youtube-nocookie iframe
 //  - recording-title filter and empty state (mocked recordings data)
-import React from 'react'
-import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
-import { act, cleanup, fireEvent, render, screen } from '@testing-library/react'
-
-import { MeetingsPage } from '@/components/community/MeetingsPage'
-import { COMMUNITY_MEETINGS } from '@/config/community-meetings'
-import { getUpcomingOddIsoWeekMeetings } from '@/lib/communityMeetingsSchedule'
-import recordingsData from '../../data/meeting-recordings.json'
+import React from "react";
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+import {
+  act,
+  cleanup,
+  fireEvent,
+  render,
+  screen,
+} from "@testing-library/react";
+
+import { MeetingsPage } from "@/components/community/MeetingsPage";
+import { COMMUNITY_MEETINGS } from "@/config/community-meetings";
+import { getUpcomingOddIsoWeekMeetings } from "@/lib/communityMeetingsSchedule";
+import recordingsData from "../../data/meeting-recordings.json";
 
 // A fixed anchor time; the actual next meeting is derived from the same
 // schedule library the component uses, so the test never hardcodes dates.
-const ANCHOR = new Date('2026-10-06T12:00:00Z')
+const ANCHOR = new Date("2026-10-06T12:00:00Z");
 
 function nextMeetingAfter(now: Date) {
-  const [next] = getUpcomingOddIsoWeekMeetings(COMMUNITY_MEETINGS, 1, now)
-  return next
+  const [next] = getUpcomingOddIsoWeekMeetings(COMMUNITY_MEETINGS, 1, now);
+  return next;
 }
 
 function renderAt(now: Date) {
-  vi.setSystemTime(now)
-  return render(<MeetingsPage />)
+  vi.setSystemTime(now);
+  return render(<MeetingsPage />);
 }
 
 function countdownText() {
-  const el = document.querySelector('.hc-meeting-countdown')
-  expect(el).not.toBeNull()
-  return el!.textContent
+  const el = document.querySelector(".hc-meeting-countdown");
+  expect(el).not.toBeNull();
+  return el!.textContent;
 }
 
 beforeEach(() => {
-  vi.useFakeTimers()
-})
+  vi.useFakeTimers();
+});
 
 afterEach(() => {
-  cleanup()
-  vi.useRealTimers()
-})
-
-describe('MeetingsPage next-meeting hero', () => {
-  it('renders the meeting compute for the current time with join link and ID', () => {
-    const next = nextMeetingAfter(ANCHOR)
-    renderAt(ANCHOR)
-
-    const join = screen.getByRole('link', { name: 'Join the meeting' })
-    expect(join.getAttribute('href')).toBe(COMMUNITY_MEETINGS.meetingUrl)
-    expect(screen.getByText(`Microsoft Teams · Meeting ID ${COMMUNITY_MEETINGS.meetingId}`)).toBeTruthy()
+  cleanup();
+  vi.useRealTimers();
+});
+
+describe("MeetingsPage next-meeting hero", () => {
+  it("renders the meeting compute for the current time with join link and ID", () => {
+    const next = nextMeetingAfter(ANCHOR);
+    renderAt(ANCHOR);
+
+    const join = screen.getByRole("link", { name: "Join the meeting" });
+    expect(join.getAttribute("href")).toBe(COMMUNITY_MEETINGS.meetingUrl);
+    expect(
+      screen.getByText(
+        `Microsoft Teams · Meeting ID ${COMMUNITY_MEETINGS.meetingId}`
+      )
+    ).toBeTruthy();
 
     // Hero heading shows the meeting date formatted in the meeting time zone.
-    const heading = document.querySelector('.hc-meeting-nextHeroMain h2')!
+    const heading = document.querySelector(".hc-meeting-nextHeroMain h2")!;
     const expected = new Intl.DateTimeFormat(undefined, {
-      weekday: 'long',
-      year: 'numeric',
-      month: 'long',
-      day: 'numeric',
-      hour: 'numeric',
-      minute: '2-digit',
+      weekday: "long",
+      year: "numeric",
+      month: "long",
+      day: "numeric",
+      hour: "numeric",
+      minute: "2-digit",
       timeZone: COMMUNITY_MEETINGS.timeZone,
-      timeZoneName: 'short',
-    }).format(next.date)
-    expect(heading.textContent).toBe(expected)
-  })
-
-  it('lists UPCOMING_COUNT (4) upcoming meetings matching the schedule library', () => {
-    const expected = getUpcomingOddIsoWeekMeetings(COMMUNITY_MEETINGS, 4, ANCHOR)
-    renderAt(ANCHOR)
-    const items = document.querySelectorAll('.hc-meeting-upcoming ol li')
-    expect(items.length).toBe(4)
+      timeZoneName: "short",
+    }).format(next.date);
+    expect(heading.textContent).toBe(expected);
+  });
+
+  it("lists UPCOMING_COUNT (4) upcoming meetings matching the schedule library", () => {
+    const expected = getUpcomingOddIsoWeekMeetings(
+      COMMUNITY_MEETINGS,
+      4,
+      ANCHOR
+    );
+    renderAt(ANCHOR);
+    const items = document.querySelectorAll(".hc-meeting-upcoming ol li");
+    expect(items.length).toBe(4);
     const shortFmt = new Intl.DateTimeFormat(undefined, {
-      weekday: 'short',
-      year: 'numeric',
-      month: 'short',
-      day: 'numeric',
-      hour: 'numeric',
-      minute: '2-digit',
+      weekday: "short",
+      year: "numeric",
+      month: "short",
+      day: "numeric",
+      hour: "numeric",
+      minute: "2-digit",
       timeZone: COMMUNITY_MEETINGS.timeZone,
-      timeZoneName: 'short',
-    })
+      timeZoneName: "short",
+    });
     expected.forEach((meeting, i) => {
-      expect(items[i].querySelector('span')!.textContent).toBe(shortFmt.format(meeting.date))
-    })
-  })
-})
-
-describe('MeetingsPage countdown branches', () => {
-  it('shows minutes only when under an hour away', () => {
-    const next = nextMeetingAfter(ANCHOR)
-    renderAt(new Date(next.date.getTime() - 5 * 60_000))
-    expect(countdownText()).toBe('in 5 min')
-  })
-
-  it('shows hours and minutes when under a day away', () => {
-    const next = nextMeetingAfter(ANCHOR)
-    renderAt(new Date(next.date.getTime() - (3 * 60 + 20) * 60_000))
-    expect(countdownText()).toBe('in 3 h 20 min')
-  })
-
-  it('shows singular day form', () => {
-    const next = nextMeetingAfter(ANCHOR)
-    renderAt(new Date(next.date.getTime() - (24 + 2) * 60 * 60_000))
-    expect(countdownText()).toBe('in 1 day 2 h')
-  })
-
-  it('shows plural days form', () => {
-    const next = nextMeetingAfter(ANCHOR)
-    renderAt(new Date(next.date.getTime() - (48 + 5) * 60 * 60_000))
-    expect(countdownText()).toBe('in 2 days 5 h')
-  })
+      expect(items[i].querySelector("span")!.textContent).toBe(
+        shortFmt.format(meeting.date)
+      );
+    });
+  });
+});
+
+describe("MeetingsPage countdown branches", () => {
+  it("shows minutes only when under an hour away", () => {
+    const next = nextMeetingAfter(ANCHOR);
+    renderAt(new Date(next.date.getTime() - 5 * 60_000));
+    expect(countdownText()).toBe("in 5 min");
+  });
+
+  it("shows hours and minutes when under a day away", () => {
+    const next = nextMeetingAfter(ANCHOR);
+    renderAt(new Date(next.date.getTime() - (3 * 60 + 20) * 60_000));
+    expect(countdownText()).toBe("in 3 h 20 min");
+  });
+
+  it("shows singular day form", () => {
+    const next = nextMeetingAfter(ANCHOR);
+    renderAt(new Date(next.date.getTime() - (24 + 2) * 60 * 60_000));
+    expect(countdownText()).toBe("in 1 day 2 h");
+  });
+
+  it("shows plural days form", () => {
+    const next = nextMeetingAfter(ANCHOR);
+    renderAt(new Date(next.date.getTime() - (48 + 5) * 60 * 60_000));
+    expect(countdownText()).toBe("in 2 days 5 h");
+  });
 
   it('shows "Happening now" during the meeting window', () => {
-    const next = nextMeetingAfter(ANCHOR)
-    renderAt(new Date(next.date.getTime() + 10 * 60_000))
-    expect(countdownText()).toBe('Happening now')
-  })
-
-  it('ticks the countdown down when the refresh interval fires', () => {
-    const next = nextMeetingAfter(ANCHOR)
-    renderAt(new Date(next.date.getTime() - 5 * 60_000))
-    expect(countdownText()).toBe('in 5 min')
+    const next = nextMeetingAfter(ANCHOR);
+    renderAt(new Date(next.date.getTime() + 10 * 60_000));
+    expect(countdownText()).toBe("Happening now");
+  });
+
+  it("ticks the countdown down when the refresh interval fires", () => {
+    const next = nextMeetingAfter(ANCHOR);
+    renderAt(new Date(next.date.getTime() - 5 * 60_000));
+    expect(countdownText()).toBe("in 5 min");
     act(() => {
-      vi.advanceTimersByTime(60_000)
-    })
-    expect(countdownText()).toBe('in 4 min')
-  })
-})
-
-describe('MeetingsPage calendar links', () => {
-  it('builds a Google Calendar link spanning the 30-minute meeting window', () => {
-    const next = nextMeetingAfter(ANCHOR)
-    renderAt(ANCHOR)
-
-    const link = screen.getByRole('link', { name: 'Google Calendar' })
-    const url = new URL(link.getAttribute('href')!)
-    expect(url.origin + url.pathname).toBe('https://calendar.google.com/calendar/render')
-    expect(url.searchParams.get('action')).toBe('TEMPLATE')
-    expect(url.searchParams.get('text')).toBe(COMMUNITY_MEETINGS.title)
-    expect(url.searchParams.get('ctz')).toBe(COMMUNITY_MEETINGS.timeZone)
-    expect(url.searchParams.get('location')).toBe(COMMUNITY_MEETINGS.meetingUrl)
-    expect(url.searchParams.get('details')).toContain(COMMUNITY_MEETINGS.meetingId)
-
-    const compact = (d: Date) => d.toISOString().replace(/[-:]|\.\d{3}/g, '')
-    const start = compact(next.date)
-    const end = compact(new Date(next.date.getTime() + COMMUNITY_MEETINGS.durationMinutes * 60_000))
-    expect(url.searchParams.get('dates')).toBe(`${start}/${end}`)
-  })
-
-  it('builds a downloadable ICS with escaped text and a per-date filename', () => {
-    const next = nextMeetingAfter(ANCHOR)
-    renderAt(ANCHOR)
-
-    const link = screen.getByRole('link', { name: 'Download .ics' })
-    expect(link.getAttribute('download')).toBe(
-      `hive-commons-community-meeting-${next.localDate}.ics`,
-    )
-
-    const href = link.getAttribute('href')!
-    expect(href.startsWith('data:text/calendar;charset=utf-8,')).toBe(true)
-    const ics = decodeURIComponent(href.slice('data:text/calendar;charset=utf-8,'.length))
-    const lines = ics.split('\r\n')
-
-    expect(lines[0]).toBe('BEGIN:VCALENDAR')
-    expect(lines[lines.length - 1]).toBe('END:VCALENDAR')
-
-    const compact = (d: Date) => d.toISOString().replace(/[-:]|\.\d{3}/g, '')
-    expect(lines).toContain(`DTSTART:${compact(next.date)}`)
+      vi.advanceTimersByTime(60_000);
+    });
+    expect(countdownText()).toBe("in 4 min");
+  });
+});
+
+describe("MeetingsPage calendar links", () => {
+  it("builds a Google Calendar link spanning the 30-minute meeting window", () => {
+    const next = nextMeetingAfter(ANCHOR);
+    renderAt(ANCHOR);
+
+    const link = screen.getByRole("link", { name: "Google Calendar" });
+    const url = new URL(link.getAttribute("href")!);
+    expect(url.origin + url.pathname).toBe(
+      "https://calendar.google.com/calendar/render"
+    );
+    expect(url.searchParams.get("action")).toBe("TEMPLATE");
+    expect(url.searchParams.get("text")).toBe(COMMUNITY_MEETINGS.title);
+    expect(url.searchParams.get("ctz")).toBe(COMMUNITY_MEETINGS.timeZone);
+    expect(url.searchParams.get("location")).toBe(
+      COMMUNITY_MEETINGS.meetingUrl
+    );
+    expect(url.searchParams.get("details")).toContain(
+      COMMUNITY_MEETINGS.meetingId
+    );
+
+    const compact = (d: Date) => d.toISOString().replace(/[-:]|\.\d{3}/g, "");
+    const start = compact(next.date);
+    const end = compact(
+      new Date(
+        next.date.getTime() + COMMUNITY_MEETINGS.durationMinutes * 60_000
+      )
+    );
+    expect(url.searchParams.get("dates")).toBe(`${start}/${end}`);
+  });
+
+  it("builds a downloadable ICS with escaped text and a per-date filename", () => {
+    const next = nextMeetingAfter(ANCHOR);
+    renderAt(ANCHOR);
+
+    const link = screen.getByRole("link", { name: "Download .ics" });
+    expect(link.getAttribute("download")).toBe(
+      `hive-commons-community-meeting-${next.localDate}.ics`
+    );
+
+    const href = link.getAttribute("href")!;
+    expect(href.startsWith("data:text/calendar;charset=utf-8,")).toBe(true);
+    const ics = decodeURIComponent(
+      href.slice("data:text/calendar;charset=utf-8,".length)
+    );
+    const lines = ics.split("\r\n");
+
+    expect(lines[0]).toBe("BEGIN:VCALENDAR");
+    expect(lines[lines.length - 1]).toBe("END:VCALENDAR");
+
+    const compact = (d: Date) => d.toISOString().replace(/[-:]|\.\d{3}/g, "");
+    expect(lines).toContain(`DTSTART:${compact(next.date)}`);
     expect(lines).toContain(
-      `DTEND:${compact(new Date(next.date.getTime() + COMMUNITY_MEETINGS.durationMinutes * 60_000))}`,
-    )
-    expect(lines).toContain(`SUMMARY:${COMMUNITY_MEETINGS.title}`)
+      `DTEND:${compact(new Date(next.date.getTime() + COMMUNITY_MEETINGS.durationMinutes * 60_000))}`
+    );
+    expect(lines).toContain(`SUMMARY:${COMMUNITY_MEETINGS.title}`);
 
     // UID is derived from the title and start date, so repeat downloads of the
     // same meeting dedupe in calendar clients.
-    const uid = lines.find(l => l.startsWith('UID:'))!
+    const uid = lines.find(l => l.startsWith("UID:"))!;
     expect(uid).toBe(
-      `UID:${COMMUNITY_MEETINGS.title.replace(/\s+/g, '-').toLowerCase()}-${compact(next.date)}@docs.hivecommons.dev`,
-    )
+      `UID:${COMMUNITY_MEETINGS.title.replace(/\s+/g, "-").toLowerCase()}-${compact(next.date)}@docs.hivecommons.dev`
+    );
 
     // Newlines in the description must be escaped per RFC 5545, never raw.
-    const description = lines.find(l => l.startsWith('DESCRIPTION:'))!
-    expect(description).toContain('\\n')
-    expect(description).toContain(`Meeting ID: ${COMMUNITY_MEETINGS.meetingId}`)
-  })
-})
-
-describe('MeetingsPage recordings (committed data)', () => {
-  it('renders each matching committed recording and swaps to an embed on play', () => {
-    const matching = (recordingsData.recordings as Array<{ id: string; title: string }>).filter(r =>
-      new RegExp(COMMUNITY_MEETINGS.recordingTitlePattern, 'i').test(r.title),
-    )
-    expect(matching.length).toBeGreaterThan(0)
-
-    renderAt(ANCHOR)
-    const cards = document.querySelectorAll('.hc-meeting-recording')
-    expect(cards.length).toBe(matching.length)
-    expect(document.querySelector('iframe')).toBeNull()
-
-    const first = matching[0]
-    fireEvent.click(screen.getByRole('button', { name: `Play ${first.title}` }))
-
-    const iframe = document.querySelector('iframe')!
-    expect(iframe.getAttribute('src')).toBe(
-      `https://www.youtube-nocookie.com/embed/${first.id}?autoplay=1`,
-    )
-    expect(iframe.getAttribute('allowfullscreen')).not.toBeNull()
+    const description = lines.find(l => l.startsWith("DESCRIPTION:"))!;
+    expect(description).toContain("\\n");
+    expect(description).toContain(
+      `Meeting ID: ${COMMUNITY_MEETINGS.meetingId}`
+    );
+  });
+});
+
+describe("MeetingsPage recordings (committed data)", () => {
+  it("renders each matching committed recording and swaps to an embed on play", () => {
+    const matching = (
+      recordingsData.recordings as Array<{ id: string; title: string }>
+    ).filter(r =>
+      new RegExp(COMMUNITY_MEETINGS.recordingTitlePattern, "i").test(r.title)
+    );
+    expect(matching.length).toBeGreaterThan(0);
+
+    renderAt(ANCHOR);
+    const cards = document.querySelectorAll(".hc-meeting-recording");
+    expect(cards.length).toBe(matching.length);
+    expect(document.querySelector("iframe")).toBeNull();
+
+    const first = matching[0];
+    fireEvent.click(
+      screen.getByRole("button", { name: `Play ${first.title}` })
+    );
+
+    const iframe = document.querySelector("iframe")!;
+    expect(iframe.getAttribute("src")).toBe(
+      `https://www.youtube-nocookie.com/embed/${first.id}?autoplay=1`
+    );
+    expect(iframe.getAttribute("allowfullscreen")).not.toBeNull();
     // Only the played card becomes active.
-    expect(document.querySelectorAll('iframe').length).toBe(1)
-  })
-})
+    expect(document.querySelectorAll("iframe").length).toBe(1);
+  });
+});
 
-describe('MeetingsPage recordings (mocked data)', () => {
+describe("MeetingsPage recordings (mocked data)", () => {
   afterEach(() => {
-    vi.resetModules()
-    vi.doUnmock('../../data/meeting-recordings.json')
-  })
+    vi.resetModules();
+    vi.doUnmock("../../data/meeting-recordings.json");
+  });
 
   async function renderWithRecordings(recordings: unknown[]) {
-    vi.resetModules()
-    vi.doMock('../../data/meeting-recordings.json', () => ({
+    vi.resetModules();
+    vi.doMock("../../data/meeting-recordings.json", () => ({
       default: { recordings },
-    }))
-    const { MeetingsPage: MockedPage } = await import('@/components/community/MeetingsPage')
-    vi.setSystemTime(ANCHOR)
-    return render(<MockedPage />)
+    }));
+    const { MeetingsPage: MockedPage } =
+      await import("@/components/community/MeetingsPage");
+    vi.setSystemTime(ANCHOR);
+    return render(<MockedPage />);
   }
 
-  it('filters out recordings whose titles do not match the pattern and shows duration', async () => {
+  it("filters out recordings whose titles do not match the pattern and shows duration", async () => {
     await renderWithRecordings([
       {
-        id: 'abc123',
-        title: 'Hive Commons Community Call 2026-09-10',
-        publishedAt: '2026-09-10T15:00:00+00:00',
-        url: 'https://www.youtube.com/watch?v=abc123',
-        thumbnail: 'https://i.ytimg.com/vi/abc123/hqdefault.jpg',
-        duration: '31:12',
+        id: "abc123",
+        title: "Hive Commons Community Call 2026-09-10",
+        publishedAt: "2026-09-10T15:00:00+00:00",
+        url: "https://www.youtube.com/watch?v=abc123",
+        thumbnail: "https://i.ytimg.com/vi/abc123/hqdefault.jpg",
+        duration: "31:12",
       },
       {
-        id: 'zzz999',
-        title: 'Unrelated conference talk',
-        publishedAt: '2026-09-11T15:00:00+00:00',
-        url: 'https://www.youtube.com/watch?v=zzz999',
-        thumbnail: 'https://i.ytimg.com/vi/zzz999/hqdefault.jpg',
+        id: "zzz999",
+        title: "Unrelated conference talk",
+        publishedAt: "2026-09-11T15:00:00+00:00",
+        url: "https://www.youtube.com/watch?v=zzz999",
+        thumbnail: "https://i.ytimg.com/vi/zzz999/hqdefault.jpg",
       },
-    ])
-
-    const cards = document.querySelectorAll('.hc-meeting-recording')
-    expect(cards.length).toBe(1)
-    expect(screen.getByText('Hive Commons Community Call 2026-09-10')).toBeTruthy()
-    expect(screen.queryByText('Unrelated conference talk')).toBeNull()
-    expect(screen.getByText('31:12')).toBeTruthy()
-  })
-
-  it('shows the empty state when no recordings match', async () => {
+    ]);
+
+    const cards = document.querySelectorAll(".hc-meeting-recording");
+    expect(cards.length).toBe(1);
+    expect(
+      screen.getByText("Hive Commons Community Call 2026-09-10")
+    ).toBeTruthy();
+    expect(screen.queryByText("Unrelated conference talk")).toBeNull();
+    expect(screen.getByText("31:12")).toBeTruthy();
+  });
+
+  it("shows the empty state when no recordings match", async () => {
     await renderWithRecordings([
       {
-        id: 'zzz999',
-        title: 'Unrelated conference talk',
-        publishedAt: '2026-09-11T15:00:00+00:00',
-        url: 'https://www.youtube.com/watch?v=zzz999',
-        thumbnail: 'https://i.ytimg.com/vi/zzz999/hqdefault.jpg',
+        id: "zzz999",
+        title: "Unrelated conference talk",
+        publishedAt: "2026-09-11T15:00:00+00:00",
+        url: "https://www.youtube.com/watch?v=zzz999",
+        thumbnail: "https://i.ytimg.com/vi/zzz999/hqdefault.jpg",
       },
-    ])
-
-    expect(screen.getByText('Recordings will appear here after each meeting.')).toBeTruthy()
-    expect(document.querySelector('.hc-meeting-recordingGrid')).toBeNull()
-  })
-})
+    ]);
+
+    expect(
+      screen.getByText("Recordings will appear here after each meeting.")
+    ).toBeTruthy();
+    expect(document.querySelector(".hc-meeting-recordingGrid")).toBeNull();
+  });
+});
diff --git a/src/__tests__/Navbar.behavior.test.tsx b/src/__tests__/Navbar.behavior.test.tsx
index 47c2bc6..f640d1e 100644
--- a/src/__tests__/Navbar.behavior.test.tsx
+++ b/src/__tests__/Navbar.behavior.test.tsx
@@ -13,7 +13,14 @@
 //  - mobile menu button toggles the menu and its aria-label
 import React from "react";
 import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
-import { act, cleanup, fireEvent, render, screen, waitFor } from "@testing-library/react";
+import {
+  act,
+  cleanup,
+  fireEvent,
+  render,
+  screen,
+  waitFor,
+} from "@testing-library/react";
 
 import { DROPDOWN_HIDE_DELAY_MS } from "@/components/navbar/useHoverDropdown";
 
@@ -85,7 +92,9 @@ function dropdownContainer(name: string): HTMLElement {
 }
 
 function dropdownMenu(name: string): HTMLElement {
-  const menu = dropdownContainer(name).querySelector<HTMLElement>("[data-dropdown-menu]");
+  const menu = dropdownContainer(name).querySelector<HTMLElement>(
+    "[data-dropdown-menu]"
+  );
   if (!menu) throw new Error(`missing dropdown menu ${name}`);
   return menu;
 }
@@ -93,7 +102,7 @@ function dropdownMenu(name: string): HTMLElement {
 function mockFetchWith(values: Record<string, string>) {
   return vi.fn(async (url: string | URL) => {
     const u = String(url);
-    const metric = Object.keys(values).find((m) => u.includes(`/${m}/`));
+    const metric = Object.keys(values).find(m => u.includes(`/${m}/`));
     if (!metric) return { ok: false, json: async () => ({}) };
     return { ok: true, json: async () => ({ value: values[metric] }) };
   });
@@ -102,7 +111,7 @@ function mockFetchWith(values: Record<string, string>) {
 beforeEach(() => {
   vi.stubGlobal(
     "fetch",
-    mockFetchWith({ stars: "999", forks: "888", watchers: "777" }),
+    mockFetchWith({ stars: "999", forks: "888", watchers: "777" })
   );
 });
 
@@ -118,12 +127,12 @@ describe("Navbar top-level links", () => {
 
     const docsLinks = screen
       .getAllByRole("link")
-      .filter((a) => a.getAttribute("href") === "/docs");
+      .filter(a => a.getAttribute("href") === "/docs");
     expect(docsLinks.length).toBeGreaterThan(0);
 
     const demo = screen
       .getAllByRole("link")
-      .filter((a) => a.getAttribute("href") === "https://hivecommons.dev");
+      .filter(a => a.getAttribute("href") === "https://hivecommons.dev");
     expect(demo.length).toBeGreaterThan(0);
     for (const a of demo) {
       expect(a.getAttribute("target")).toBe("_blank");
@@ -151,7 +160,7 @@ describe("Navbar hover dropdowns", () => {
     expect(
       dropdownContainer("contribute")
         .querySelector("[data-dropdown-button]")
-        ?.getAttribute("aria-expanded"),
+        ?.getAttribute("aria-expanded")
     ).toBe("true");
 
     // Opening community closes contribute.
@@ -161,7 +170,7 @@ describe("Navbar hover dropdowns", () => {
     expect(
       dropdownContainer("contribute")
         .querySelector("[data-dropdown-button]")
-        ?.getAttribute("aria-expanded"),
+        ?.getAttribute("aria-expanded")
     ).toBe("false");
   });
 
@@ -177,7 +186,7 @@ describe("Navbar hover dropdowns", () => {
 
     await waitFor(
       () => expect(dropdownMenu("github").style.display).toBe("none"),
-      { timeout: DROPDOWN_HIDE_DELAY_MS + 1000 },
+      { timeout: DROPDOWN_HIDE_DELAY_MS + 1000 }
     );
   });
 
@@ -188,7 +197,7 @@ describe("Navbar hover dropdowns", () => {
     fireEvent.mouseLeave(dropdownContainer("contribute"));
     fireEvent.mouseEnter(dropdownMenu("contribute"));
 
-    await new Promise((r) => setTimeout(r, DROPDOWN_HIDE_DELAY_MS + 100));
+    await new Promise(r => setTimeout(r, DROPDOWN_HIDE_DELAY_MS + 100));
     expect(dropdownMenu("contribute").style.display).toBe("block");
   });
 
@@ -205,7 +214,7 @@ describe("Navbar hover dropdowns", () => {
     expect(
       dropdownContainer("community")
         .querySelector("[data-dropdown-button]")
-        ?.getAttribute("aria-expanded"),
+        ?.getAttribute("aria-expanded")
     ).toBe("false");
   });
 });
@@ -225,14 +234,14 @@ describe("Navbar GitHub stats", () => {
       "fetch",
       vi.fn(async () => {
         throw new Error("network down");
-      }),
+      })
     );
     render(<Navbar />);
     // Defaults render immediately and are never replaced.
     expect(screen.getAllByText("30").length).toBeGreaterThan(0);
     expect(screen.getAllByText("25").length).toBeGreaterThan(0);
     await act(async () => {
-      await new Promise((r) => setTimeout(r, 50));
+      await new Promise(r => setTimeout(r, 50));
     });
     expect(screen.getAllByText("30").length).toBeGreaterThan(0);
   });
diff --git a/src/__tests__/NotFoundUI.behavior.test.tsx b/src/__tests__/NotFoundUI.behavior.test.tsx
index 93aa060..d06114d 100644
--- a/src/__tests__/NotFoundUI.behavior.test.tsx
+++ b/src/__tests__/NotFoundUI.behavior.test.tsx
@@ -11,7 +11,13 @@
 //    response with no results shows "No matching docs found."
 import React from "react";
 import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
-import { cleanup, fireEvent, render, screen, waitFor } from "@testing-library/react";
+import {
+  cleanup,
+  fireEvent,
+  render,
+  screen,
+  waitFor,
+} from "@testing-library/react";
 
 const usePathnameMock = vi.fn<() => string | null>();
 
@@ -33,7 +39,12 @@ vi.mock("next/link", () => ({
 
 import NotFoundUI from "@/components/NotFoundUI";
 
-type SearchResult = { title: string; url: string; category: string; snippet: string };
+type SearchResult = {
+  title: string;
+  url: string;
+  category: string;
+  snippet: string;
+};
 
 function makeResults(count: number): SearchResult[] {
   return Array.from({ length: count }, (_, i) => ({
@@ -63,20 +74,26 @@ describe("quick links and messaging", () => {
     usePathnameMock.mockReturnValue("/docs/hive/some/moved/page");
     render(<NotFoundUI />);
 
-    expect(screen.getByRole("heading", { name: "Hive docs links" })).toBeTruthy();
+    expect(
+      screen.getByRole("heading", { name: "Hive docs links" })
+    ).toBeTruthy();
     expect(screen.getByText(/reorganized the Hive docs/)).toBeTruthy();
     // primary quick links render both as action buttons and in the sidebar list
     const intros = screen.getAllByRole("link", { name: /Hive intro/ });
     expect(intros).toHaveLength(2);
     expect(intros[0].getAttribute("href")).toBe("/docs/hive/readme");
-    expect(screen.getAllByRole("link", { name: /Documentation map/ }).length).toBeGreaterThan(0);
+    expect(
+      screen.getAllByRole("link", { name: /Documentation map/ }).length
+    ).toBeGreaterThan(0);
   });
 
   it("treats the bare /docs/hive path as Hive docs", () => {
     usePathnameMock.mockReturnValue("/docs/hive");
     render(<NotFoundUI />);
 
-    expect(screen.getByRole("heading", { name: "Hive docs links" })).toBeTruthy();
+    expect(
+      screen.getByRole("heading", { name: "Hive docs links" })
+    ).toBeTruthy();
   });
 
   it("shows the general links and message elsewhere", () => {
@@ -84,8 +101,12 @@ describe("quick links and messaging", () => {
     render(<NotFoundUI />);
 
     expect(screen.getByRole("heading", { name: "Helpful links" })).toBeTruthy();
-    expect(screen.getByText(/reorganized Hive Commons documentation/)).toBeTruthy();
-    expect(screen.getAllByRole("link", { name: /What is Hive Commons\?/ }).length).toBeGreaterThan(0);
+    expect(
+      screen.getByText(/reorganized Hive Commons documentation/)
+    ).toBeTruthy();
+    expect(
+      screen.getAllByRole("link", { name: /What is Hive Commons\?/ }).length
+    ).toBeGreaterThan(0);
   });
 
   it("marks external quick links to open safely in a new tab", () => {
@@ -148,7 +169,7 @@ describe("search", () => {
     expect(screen.getByText("Category 1")).toBeTruthy();
     expect(screen.getByText("Snippet 1")).toBeTruthy();
     expect(
-      screen.getByRole("link", { name: /Result 1/ }).getAttribute("href"),
+      screen.getByRole("link", { name: /Result 1/ }).getAttribute("href")
     ).toBe("/docs/result-1");
   });
 
@@ -157,7 +178,9 @@ describe("search", () => {
     render(<NotFoundUI />);
 
     submitSearch("nothing matches this");
-    await waitFor(() => expect(screen.getByText("No matching docs found.")).toBeTruthy());
+    await waitFor(() =>
+      expect(screen.getByText("No matching docs found.")).toBeTruthy()
+    );
   });
 
   it("shows the unavailable hint on a non-ok response", async () => {
@@ -166,7 +189,9 @@ describe("search", () => {
 
     submitSearch("boom");
     await waitFor(() =>
-      expect(screen.getByText("Search is temporarily unavailable.")).toBeTruthy(),
+      expect(
+        screen.getByText("Search is temporarily unavailable.")
+      ).toBeTruthy()
     );
   });
 
@@ -183,7 +208,9 @@ describe("search", () => {
     fetchMock.mockRejectedValueOnce(new Error("network down"));
     submitSearch("second");
     await waitFor(() =>
-      expect(screen.getByText("Search is temporarily unavailable.")).toBeTruthy(),
+      expect(
+        screen.getByText("Search is temporarily unavailable.")
+      ).toBeTruthy()
     );
     expect(screen.queryByText("Result 1")).toBeNull();
   });
diff --git a/src/__tests__/NotFoundUI.copy.test.ts b/src/__tests__/NotFoundUI.copy.test.ts
index ad534f9..1b6195f 100644
--- a/src/__tests__/NotFoundUI.copy.test.ts
+++ b/src/__tests__/NotFoundUI.copy.test.ts
@@ -1,25 +1,37 @@
-import fs from 'fs'
-import path from 'path'
-import { describe, expect, it } from 'vitest'
+import fs from "fs";
+import path from "path";
+import { describe, expect, it } from "vitest";
 
-const notFound = fs.readFileSync(path.join(process.cwd(), 'src/components/NotFoundUI.tsx'), 'utf8')
-const errorFallback = fs.readFileSync(path.join(process.cwd(), 'src/components/ErrorFallbackUI.tsx'), 'utf8')
+const notFound = fs.readFileSync(
+  path.join(process.cwd(), "src/components/NotFoundUI.tsx"),
+  "utf8"
+);
+const errorFallback = fs.readFileSync(
+  path.join(process.cwd(), "src/components/ErrorFallbackUI.tsx"),
+  "utf8"
+);
 
-describe('Hive Commons 404 and error copy', () => {
-  it('uses Hive Commons themed 404 copy and Hive-specific docs links', () => {
-    expect(notFound).toContain('This page may have moved while we reorganized the Hive docs')
-    expect(notFound).toContain('/docs/hive/readme')
-    expect(notFound).toContain('/docs/hive/getting-started')
-    expect(notFound).toContain('/docs/hive/documentation-map')
-    expect(notFound).toContain('/docs/community/meetings')
-    expect(notFound).toContain('Search the docs')
-    expect(notFound).not.toMatch(/KubeStellar|Console theme|Kubernetes dashboard|multi-cluster management/i)
-  })
+describe("Hive Commons 404 and error copy", () => {
+  it("uses Hive Commons themed 404 copy and Hive-specific docs links", () => {
+    expect(notFound).toContain(
+      "This page may have moved while we reorganized the Hive docs"
+    );
+    expect(notFound).toContain("/docs/hive/readme");
+    expect(notFound).toContain("/docs/hive/getting-started");
+    expect(notFound).toContain("/docs/hive/documentation-map");
+    expect(notFound).toContain("/docs/community/meetings");
+    expect(notFound).toContain("Search the docs");
+    expect(notFound).not.toMatch(
+      /KubeStellar|Console theme|Kubernetes dashboard|multi-cluster management/i
+    );
+  });
 
-  it('uses Hive Commons themed runtime error copy', () => {
-    expect(errorFallback).toContain('Hive Commons Docs')
-    expect(errorFallback).toContain('The docs hit a temporary runtime error')
-    expect(errorFallback).toContain('/docs/hive/readme')
-    expect(errorFallback).not.toMatch(/KubeStellar|Console theme|Kubernetes dashboard|multi-cluster management/i)
-  })
-})
+  it("uses Hive Commons themed runtime error copy", () => {
+    expect(errorFallback).toContain("Hive Commons Docs");
+    expect(errorFallback).toContain("The docs hit a temporary runtime error");
+    expect(errorFallback).toContain("/docs/hive/readme");
+    expect(errorFallback).not.toMatch(
+      /KubeStellar|Console theme|Kubernetes dashboard|multi-cluster management/i
+    );
+  });
+});
diff --git a/src/__tests__/RelatedProjects.behavior.test.tsx b/src/__tests__/RelatedProjects.behavior.test.tsx
index ac02906..7c6bf67 100644
--- a/src/__tests__/RelatedProjects.behavior.test.tsx
+++ b/src/__tests__/RelatedProjects.behavior.test.tsx
@@ -43,11 +43,14 @@ vi.mock("next/link", () => ({
   ),
 }));
 
-const useSharedConfigMock = vi.fn<() => { config: SharedConfig | null }>(() => ({
-  config: null,
-}));
-vi.mock("@/hooks/useSharedConfig", async (importOriginal) => {
-  const actual = await importOriginal<typeof import("@/hooks/useSharedConfig")>();
+const useSharedConfigMock = vi.fn<() => { config: SharedConfig | null }>(
+  () => ({
+    config: null,
+  })
+);
+vi.mock("@/hooks/useSharedConfig", async importOriginal => {
+  const actual =
+    await importOriginal<typeof import("@/hooks/useSharedConfig")>();
   return {
     ...actual,
     useSharedConfig: () => useSharedConfigMock(),
@@ -56,7 +59,9 @@ vi.mock("@/hooks/useSharedConfig", async (importOriginal) => {
 
 import { RelatedProjects } from "@/components/docs/RelatedProjects";
 
-function configWith(relatedProjects: SharedConfig["relatedProjects"]): SharedConfig {
+function configWith(
+  relatedProjects: SharedConfig["relatedProjects"]
+): SharedConfig {
   return {
     versions: {},
     projects: {},
@@ -111,7 +116,7 @@ describe("project list and highlighting", () => {
     render(
       <RelatedProjects
         generalSections={[{ title: "Community", href: "/docs/community" }]}
-      />,
+      />
     );
     expect(screen.getByText("Community").className).toContain("font-medium");
     expect(screen.getByText("Hive").className).not.toContain("font-medium");
@@ -122,7 +127,9 @@ describe("getProjectUrl branch-deploy handling", () => {
   it("keeps links relative on localhost (production-like host)", async () => {
     render(<RelatedProjects />);
     // The mounted effect re-evaluates isProduction from window.location.
-    expect((await screen.findByText("pluk")).getAttribute("href")).toBe("/docs/pluk");
+    expect((await screen.findByText("pluk")).getAttribute("href")).toBe(
+      "/docs/pluk"
+    );
   });
 
   it("prefixes the production origin on unknown hostnames", async () => {
@@ -134,12 +141,17 @@ describe("getProjectUrl branch-deploy handling", () => {
     try {
       render(<RelatedProjects />);
       expect((await screen.findByText("pluk")).getAttribute("href")).toBe(
-        "https://docs.hivecommons.dev/docs/pluk",
+        "https://docs.hivecommons.dev/docs/pluk"
       );
       // Absolute URLs render as plain <a>, not next/link.
-      expect(screen.getByText("pluk").getAttribute("data-next-link")).toBeNull();
+      expect(
+        screen.getByText("pluk").getAttribute("data-next-link")
+      ).toBeNull();
     } finally {
-      Object.defineProperty(window, "location", { configurable: true, value: original });
+      Object.defineProperty(window, "location", {
+        configurable: true,
+        value: original,
+      });
     }
   });
 });
@@ -147,7 +159,9 @@ describe("getProjectUrl branch-deploy handling", () => {
 describe("Legacy secondary section", () => {
   it("is collapsed by default and expands via the Legacy button", () => {
     render(<RelatedProjects />);
-    const wrapper = screen.getByText("Old Thing").closest("div.overflow-hidden");
+    const wrapper = screen
+      .getByText("Old Thing")
+      .closest("div.overflow-hidden");
     expect(wrapper?.className).toContain("max-h-0");
     fireEvent.click(screen.getByText("Legacy"));
     expect(wrapper?.className).toContain("max-h-[2000px]");
@@ -157,7 +171,9 @@ describe("Legacy secondary section", () => {
 
   it("syncs with autoExpandLegacy across rerenders", () => {
     const { rerender } = render(<RelatedProjects autoExpandLegacy={false} />);
-    const wrapper = screen.getByText("Old Thing").closest("div.overflow-hidden");
+    const wrapper = screen
+      .getByText("Old Thing")
+      .closest("div.overflow-hidden");
     expect(wrapper?.className).toContain("max-h-0");
     rerender(<RelatedProjects autoExpandLegacy={true} />);
     expect(wrapper?.className).toContain("max-h-[2000px]");
@@ -203,9 +219,11 @@ describe("renderLegacyMenuTree", () => {
     renderTree();
     expect(screen.getByText("Guides")).toBeTruthy();
     expect(screen.getByText("Quickstart").getAttribute("href")).toBe(
-      "/docs/legacy/quickstart",
+      "/docs/legacy/quickstart"
+    );
+    expect(screen.getByText("Quickstart").getAttribute("data-next-link")).toBe(
+      "true"
     );
-    expect(screen.getByText("Quickstart").getAttribute("data-next-link")).toBe("true");
     const external = screen.getByText("External");
     expect(external.getAttribute("href")).toBe("https://example.com/legacy");
     expect(external.getAttribute("data-next-link")).toBeNull();
@@ -218,7 +236,7 @@ describe("renderLegacyMenuTree", () => {
     expect(screen.queryByText("Deepest")).toBeNull();
     fireEvent.click(screen.getByRole("button", { name: /Deep/ }));
     expect(screen.getByText("Deepest").getAttribute("href")).toBe(
-      "/docs/legacy/deepest",
+      "/docs/legacy/deepest"
     );
     fireEvent.click(screen.getByRole("button", { name: /Deep/ }));
     expect(screen.queryByText("Deepest")).toBeNull();
diff --git a/src/__tests__/TableOfContents.behavior.test.tsx b/src/__tests__/TableOfContents.behavior.test.tsx
index 80d00a8..71a9f10 100644
--- a/src/__tests__/TableOfContents.behavior.test.tsx
+++ b/src/__tests__/TableOfContents.behavior.test.tsx
@@ -15,7 +15,9 @@ import { cleanup, fireEvent, render, screen } from "@testing-library/react";
 
 import { TableOfContents } from "@/components/docs/TableOfContents";
 
-type ObserverCallback = (entries: Array<Partial<IntersectionObserverEntry>>) => void;
+type ObserverCallback = (
+  entries: Array<Partial<IntersectionObserverEntry>>
+) => void;
 
 let observerCallback: ObserverCallback | undefined;
 const observed: Element[] = [];
@@ -82,7 +84,7 @@ describe("TableOfContents", () => {
     addHeading("intro");
     addHeading("faq");
     render(<TableOfContents toc={TOC} />);
-    expect(observed.map((el) => el.id)).toEqual(["intro", "faq"]);
+    expect(observed.map(el => el.id)).toEqual(["intro", "faq"]);
   });
 
   it("highlights the heading reported as intersecting", () => {
diff --git a/src/__tests__/ThemeToggle.behavior.test.tsx b/src/__tests__/ThemeToggle.behavior.test.tsx
index 842aec4..84d3c2f 100644
--- a/src/__tests__/ThemeToggle.behavior.test.tsx
+++ b/src/__tests__/ThemeToggle.behavior.test.tsx
@@ -57,7 +57,9 @@ describe("ThemeToggle fixed variant (mounted)", () => {
 
   it("clicking in dark mode requests the light theme", () => {
     render(<ThemeToggle />);
-    fireEvent.click(screen.getByRole("button", { name: "Switch to light mode" }));
+    fireEvent.click(
+      screen.getByRole("button", { name: "Switch to light mode" })
+    );
     expect(setThemeMock).toHaveBeenCalledTimes(1);
     expect(setThemeMock).toHaveBeenCalledWith("light");
   });
@@ -65,7 +67,9 @@ describe("ThemeToggle fixed variant (mounted)", () => {
   it("clicking in light mode requests the dark theme", () => {
     resolvedTheme = "light";
     render(<ThemeToggle />);
-    fireEvent.click(screen.getByRole("button", { name: "Switch to dark mode" }));
+    fireEvent.click(
+      screen.getByRole("button", { name: "Switch to dark mode" })
+    );
     expect(setThemeMock).toHaveBeenCalledWith("dark");
   });
 });
@@ -81,13 +85,17 @@ describe("ThemeToggle icon variant (mounted)", () => {
   it("toggles from light to dark", () => {
     resolvedTheme = "light";
     render(<ThemeToggle variant="icon" />);
-    fireEvent.click(screen.getByRole("button", { name: "Switch to dark mode" }));
+    fireEvent.click(
+      screen.getByRole("button", { name: "Switch to dark mode" })
+    );
     expect(setThemeMock).toHaveBeenCalledWith("dark");
   });
 
   it("toggles from dark to light", () => {
     render(<ThemeToggle variant="icon" />);
-    fireEvent.click(screen.getByRole("button", { name: "Switch to light mode" }));
+    fireEvent.click(
+      screen.getByRole("button", { name: "Switch to light mode" })
+    );
     expect(setThemeMock).toHaveBeenCalledWith("light");
   });
 });
diff --git a/src/__tests__/VersionSelector.behavior.test.tsx b/src/__tests__/VersionSelector.behavior.test.tsx
index bc38a37..46c601b 100644
--- a/src/__tests__/VersionSelector.behavior.test.tsx
+++ b/src/__tests__/VersionSelector.behavior.test.tsx
@@ -26,8 +26,9 @@ const useSharedConfigMock = vi.fn<() => { config: SharedConfig | null }>(
   () => ({ config: null })
 );
 
-vi.mock("@/hooks/useSharedConfig", async (importOriginal) => {
-  const actual = await importOriginal<typeof import("@/hooks/useSharedConfig")>();
+vi.mock("@/hooks/useSharedConfig", async importOriginal => {
+  const actual =
+    await importOriginal<typeof import("@/hooks/useSharedConfig")>();
   return {
     ...actual,
     useSharedConfig: () => useSharedConfigMock(),
@@ -94,9 +95,7 @@ describe("version list", () => {
   it("sorts default first, dev next, numeric descending, legacy last", () => {
     render(<VersionSelector />);
     openDropdown();
-    const labels = screen
-      .getAllByRole("option")
-      .map((o) => o.textContent);
+    const labels = screen.getAllByRole("option").map(o => o.textContent);
     expect(labels).toEqual([
       "v5 (Latest)",
       "main (dev)",
diff --git a/src/__tests__/buildPageMapForBranch-wrapper.test.ts b/src/__tests__/buildPageMapForBranch-wrapper.test.ts
index 591a82f..5e9c366 100644
--- a/src/__tests__/buildPageMapForBranch-wrapper.test.ts
+++ b/src/__tests__/buildPageMapForBranch-wrapper.test.ts
@@ -1,8 +1,5 @@
-import { describe, expect, it } from 'vitest'
-import {
-  buildPageMap,
-  buildPageMapForBranch,
-} from '../app/docs/page-map'
+import { describe, expect, it } from "vitest";
+import { buildPageMap, buildPageMapForBranch } from "../app/docs/page-map";
 
 /**
  * Coverage for the async `buildPageMapForBranch()` wrapper exported from
@@ -30,42 +27,42 @@ import {
  *   4. Calling it a second time is stable (same result), so it can
  *      safely be invoked from repeat branch-preview requests.
  */
-describe('buildPageMapForBranch — async delegation wrapper', () => {
-  it('is an async function returning a Promise', () => {
-    expect(typeof buildPageMapForBranch).toBe('function')
-    const returned = buildPageMapForBranch()
+describe("buildPageMapForBranch — async delegation wrapper", () => {
+  it("is an async function returning a Promise", () => {
+    expect(typeof buildPageMapForBranch).toBe("function");
+    const returned = buildPageMapForBranch();
     // eslint-disable-next-line @typescript-eslint/no-explicit-any
-    expect(returned && typeof (returned as any).then).toBe('function')
+    expect(returned && typeof (returned as any).then).toBe("function");
     // Prevent an unhandled promise if the assertion fires.
-    return returned.then(() => {})
-  })
+    return returned.then(() => {});
+  });
 
   it('resolves to the exact same build as buildPageMap("kubestellar")', async () => {
     const [async_, sync] = await Promise.all([
       buildPageMapForBranch(),
-      Promise.resolve(buildPageMap('kubestellar')),
-    ])
-    expect(async_).toEqual(sync)
-  })
+      Promise.resolve(buildPageMap("kubestellar")),
+    ]);
+    expect(async_).toEqual(sync);
+  });
 
-  it('resolved value carries the documented pageMap/routeMap/filePaths/contentPath shape', async () => {
-    const build = await buildPageMapForBranch()
-    expect(build).toHaveProperty('pageMap')
-    expect(build).toHaveProperty('routeMap')
-    expect(build).toHaveProperty('filePaths')
-    expect(build).toHaveProperty('contentPath')
+  it("resolved value carries the documented pageMap/routeMap/filePaths/contentPath shape", async () => {
+    const build = await buildPageMapForBranch();
+    expect(build).toHaveProperty("pageMap");
+    expect(build).toHaveProperty("routeMap");
+    expect(build).toHaveProperty("filePaths");
+    expect(build).toHaveProperty("contentPath");
 
-    expect(Array.isArray(build.pageMap)).toBe(true)
-    expect(Array.isArray(build.filePaths)).toBe(true)
-    expect(typeof build.contentPath).toBe('string')
-    expect(build.contentPath.length).toBeGreaterThan(0)
-    expect(typeof build.routeMap).toBe('object')
-    expect(build.routeMap).not.toBeNull()
-  })
+    expect(Array.isArray(build.pageMap)).toBe(true);
+    expect(Array.isArray(build.filePaths)).toBe(true);
+    expect(typeof build.contentPath).toBe("string");
+    expect(build.contentPath.length).toBeGreaterThan(0);
+    expect(typeof build.routeMap).toBe("object");
+    expect(build.routeMap).not.toBeNull();
+  });
 
-  it('returns a stable result across repeat calls (idempotent for preview reruns)', async () => {
-    const first = await buildPageMapForBranch()
-    const second = await buildPageMapForBranch()
-    expect(second).toEqual(first)
-  })
-})
+  it("returns a stable result across repeat calls (idempotent for preview reruns)", async () => {
+    const first = await buildPageMapForBranch();
+    const second = await buildPageMapForBranch();
+    expect(second).toEqual(first);
+  });
+});
diff --git a/src/__tests__/check-internal-links-helpers.test.ts b/src/__tests__/check-internal-links-helpers.test.ts
index d438ab1..5ef2066 100644
--- a/src/__tests__/check-internal-links-helpers.test.ts
+++ b/src/__tests__/check-internal-links-helpers.test.ts
@@ -145,7 +145,16 @@ describe("isExternalOrAnchor", () => {
 // ─────────────────────────────────────────────────────────────────────────
 describe("ASSET_EXT", () => {
   it("matches common image formats", () => {
-    for (const ext of ["png", "jpg", "jpeg", "gif", "svg", "webp", "avif", "ico"]) {
+    for (const ext of [
+      "png",
+      "jpg",
+      "jpeg",
+      "gif",
+      "svg",
+      "webp",
+      "avif",
+      "ico",
+    ]) {
       expect(ASSET_EXT.test(`foo.${ext}`)).toBe(true);
     }
   });
@@ -221,39 +230,39 @@ describe("resolveInternalLink", () => {
 
   it("resolves '../' up-level links", () => {
     expect(resolveInternalLink("../other/page.md", base)).toBe(
-      "/docs/other/page",
+      "/docs/other/page"
     );
   });
 
   it("keeps root-absolute paths unchanged (aside from stripping .md/.mdx)", () => {
     expect(resolveInternalLink("/docs/console/overview.md", base)).toBe(
-      "/docs/console/overview",
+      "/docs/console/overview"
     );
     expect(resolveInternalLink("/docs/console/overview", base)).toBe(
-      "/docs/console/overview",
+      "/docs/console/overview"
     );
   });
 
   it("strips query strings and fragments before resolving", () => {
     expect(resolveInternalLink("intro.md?v=1", base)).toBe("/docs/hive/intro");
     expect(resolveInternalLink("intro.md#section", base)).toBe(
-      "/docs/hive/intro",
+      "/docs/hive/intro"
     );
     expect(resolveInternalLink("/docs/x?v=1#top", base)).toBe("/docs/x");
   });
 
   it("normalises redundant path segments via path.posix.normalize", () => {
     expect(resolveInternalLink("./sub/../intro.md", base)).toBe(
-      "/docs/hive/intro",
+      "/docs/hive/intro"
     );
     expect(resolveInternalLink("sub/./intro.md", base)).toBe(
-      "/docs/hive/sub/intro",
+      "/docs/hive/sub/intro"
     );
   });
 
   it("strips .md or .mdx suffix regardless of resolution path", () => {
     expect(resolveInternalLink("../other/page.mdx", base)).toBe(
-      "/docs/other/page",
+      "/docs/other/page"
     );
     expect(resolveInternalLink("/docs/a/b.md", base)).toBe("/docs/a/b");
   });
@@ -358,7 +367,7 @@ describe("parseNavStructures", () => {
     const entries = parseNavStructures(src);
     expect(entries).toHaveLength(2);
     expect(new Set(entries.map(navEntryRoute))).toEqual(
-      new Set(["/docs/hive/overview/introduction", "/docs/hive/introduction"]),
+      new Set(["/docs/hive/overview/introduction", "/docs/hive/introduction"])
     );
   });
 
@@ -380,7 +389,7 @@ describe("parseNavStructures", () => {
         "/docs/hive/overview/intro",
         "/docs/hive/guides/intro",
         "/docs/hive/intro",
-      ]),
+      ])
     );
   });
 
@@ -437,11 +446,11 @@ describe("parseNavStructures", () => {
 ]
 `;
     const [sectioned, bare] = parseNavStructures(src);
-expect(sectioned.sectionSlug).toBe("whats-new");
+    expect(sectioned.sectionSlug).toBe("whats-new");
     expect(sectioned.slug).toBe("v1-2-3-release-notes");
     expect(bare.sectionSlug).toBe("");
     expect(navEntryRoute(sectioned)).toBe(
-  "/docs/hive/whats-new/v1-2-3-release-notes",
+      "/docs/hive/whats-new/v1-2-3-release-notes"
     );
   });
 
@@ -530,7 +539,7 @@ describe("navEntryRoute", () => {
 
   it("returns /<base>/<sectionSlug>/<slug> when sectionSlug is set", () => {
     expect(navEntryRoute({ ...base, sectionSlug: "overview" })).toBe(
-      "/docs/hive/overview/intro",
+      "/docs/hive/overview/intro"
     );
   });
 });
diff --git a/src/__tests__/communityMeetingsSchedule.test.ts b/src/__tests__/communityMeetingsSchedule.test.ts
index f212099..52603c7 100644
--- a/src/__tests__/communityMeetingsSchedule.test.ts
+++ b/src/__tests__/communityMeetingsSchedule.test.ts
@@ -1,44 +1,85 @@
-import { describe, expect, it } from 'vitest'
-import { getUpcomingOddIsoWeekMeetings, isoWeekInfo, type MeetingScheduleConfig } from '@/lib/communityMeetingsSchedule'
+import { describe, expect, it } from "vitest";
+import {
+  getUpcomingOddIsoWeekMeetings,
+  isoWeekInfo,
+  type MeetingScheduleConfig,
+} from "@/lib/communityMeetingsSchedule";
 
 const config: MeetingScheduleConfig = {
-  timeZone: 'America/New_York',
+  timeZone: "America/New_York",
   isoWeekday: 4,
   localTime: { hour: 10, minute: 0 },
   durationMinutes: 30,
   exceptions: [],
-}
+};
 
-describe('community meeting odd ISO week recurrence', () => {
-  it('treats 2026-09-24 as an odd ISO week meeting day', () => {
-    expect(isoWeekInfo('2026-09-24')).toMatchObject({ isoYear: 2026, week: 39, isoWeekday: 4 })
+describe("community meeting odd ISO week recurrence", () => {
+  it("treats 2026-09-24 as an odd ISO week meeting day", () => {
+    expect(isoWeekInfo("2026-09-24")).toMatchObject({
+      isoYear: 2026,
+      week: 39,
+      isoWeekday: 4,
+    });
 
-    const [next] = getUpcomingOddIsoWeekMeetings(config, 1, new Date('2026-09-24T11:59:00Z'))
-    expect(next.localDate).toBe('2026-09-24')
-  })
+    const [next] = getUpcomingOddIsoWeekMeetings(
+      config,
+      1,
+      new Date("2026-09-24T11:59:00Z")
+    );
+    expect(next.localDate).toBe("2026-09-24");
+  });
 
-  it('allows back-to-back meetings across ISO week 53 and week 1', () => {
-    expect(isoWeekInfo('2026-12-31')).toMatchObject({ isoYear: 2026, week: 53, isoWeekday: 4 })
-    expect(isoWeekInfo('2027-01-07')).toMatchObject({ isoYear: 2027, week: 1, isoWeekday: 4 })
+  it("allows back-to-back meetings across ISO week 53 and week 1", () => {
+    expect(isoWeekInfo("2026-12-31")).toMatchObject({
+      isoYear: 2026,
+      week: 53,
+      isoWeekday: 4,
+    });
+    expect(isoWeekInfo("2027-01-07")).toMatchObject({
+      isoYear: 2027,
+      week: 1,
+      isoWeekday: 4,
+    });
 
-    const meetings = getUpcomingOddIsoWeekMeetings(config, 2, new Date('2026-12-30T15:00:00Z'))
-    expect(meetings.map(meeting => meeting.localDate)).toEqual(['2026-12-31', '2027-01-07'])
-  })
+    const meetings = getUpcomingOddIsoWeekMeetings(
+      config,
+      2,
+      new Date("2026-12-30T15:00:00Z")
+    );
+    expect(meetings.map(meeting => meeting.localDate)).toEqual([
+      "2026-12-31",
+      "2027-01-07",
+    ]);
+  });
 
-  it('can cancel a generated odd-week date with an exception', () => {
+  it("can cancel a generated odd-week date with an exception", () => {
     const meetings = getUpcomingOddIsoWeekMeetings(
-      { ...config, exceptions: [{ date: '2026-12-31', reason: 'holiday break' }] },
+      {
+        ...config,
+        exceptions: [{ date: "2026-12-31", reason: "holiday break" }],
+      },
       2,
-      new Date('2026-12-30T15:00:00Z'),
-    )
-    expect(meetings.map(meeting => meeting.localDate)).toEqual(['2027-01-07', '2027-01-21'])
-  })
-
-  it('keeps the active meeting as next until the meeting window ends', () => {
-    const [during] = getUpcomingOddIsoWeekMeetings(config, 1, new Date('2026-09-24T14:15:00Z'))
-    const [after] = getUpcomingOddIsoWeekMeetings(config, 1, new Date('2026-09-24T14:31:00Z'))
-
-    expect(during.localDate).toBe('2026-09-24')
-    expect(after.localDate).toBe('2026-10-08')
-  })
-})
+      new Date("2026-12-30T15:00:00Z")
+    );
+    expect(meetings.map(meeting => meeting.localDate)).toEqual([
+      "2027-01-07",
+      "2027-01-21",
+    ]);
+  });
+
+  it("keeps the active meeting as next until the meeting window ends", () => {
+    const [during] = getUpcomingOddIsoWeekMeetings(
+      config,
+      1,
+      new Date("2026-09-24T14:15:00Z")
+    );
+    const [after] = getUpcomingOddIsoWeekMeetings(
+      config,
+      1,
+      new Date("2026-09-24T14:31:00Z")
+    );
+
+    expect(during.localDate).toBe("2026-09-24");
+    expect(after.localDate).toBe("2026-10-08");
+  });
+});
diff --git a/src/__tests__/docs-image-route.containment-guard.test.ts b/src/__tests__/docs-image-route.containment-guard.test.ts
index 98262d4..b93a8ba 100644
--- a/src/__tests__/docs-image-route.containment-guard.test.ts
+++ b/src/__tests__/docs-image-route.containment-guard.test.ts
@@ -1,4 +1,4 @@
-import { describe, it, expect, vi, beforeEach } from 'vitest'
+import { describe, it, expect, vi, beforeEach } from "vitest";
 
 /**
  * Regression guard for the second traversal-defense branch in
@@ -17,53 +17,56 @@ import { describe, it, expect, vi, beforeEach } from 'vitest'
  * second guard on line 33 unexercised.
  */
 
-vi.mock('fs', () => ({
+vi.mock("fs", () => ({
   default: {
     existsSync: () => false,
     readFileSync: () => Buffer.alloc(0),
   },
-}))
+}));
 
-vi.mock('next/server', () => {
+vi.mock("next/server", () => {
   class NextResponse {
-    body: unknown
-    status: number
-    headers: Map<string, string>
-    constructor(body: unknown, init?: { status?: number; headers?: Record<string, string> }) {
-      this.body = body
-      this.status = init?.status ?? 200
-      this.headers = new Map(Object.entries(init?.headers ?? {}))
+    body: unknown;
+    status: number;
+    headers: Map<string, string>;
+    constructor(
+      body: unknown,
+      init?: { status?: number; headers?: Record<string, string> }
+    ) {
+      this.body = body;
+      this.status = init?.status ?? 200;
+      this.headers = new Map(Object.entries(init?.headers ?? {}));
     }
   }
-  return { NextRequest: class {}, NextResponse }
-})
+  return { NextRequest: class {}, NextResponse };
+});
 
 async function call(pathSegments: string[]) {
-  const { GET } = await import('../app/api/docs-image/[...path]/route')
-  const params = Promise.resolve({ path: pathSegments })
+  const { GET } = await import("../app/api/docs-image/[...path]/route");
+  const params = Promise.resolve({ path: pathSegments });
   return (await GET({} as never, { params })) as unknown as {
-    body: unknown
-    status: number
-  }
+    body: unknown;
+    status: number;
+  };
 }
 
-describe('/api/docs-image/[...path] — containment guard (empty path)', () => {
-  beforeEach(() => vi.resetModules())
+describe("/api/docs-image/[...path] — containment guard (empty path)", () => {
+  beforeEach(() => vi.resetModules());
 
-  it('rejects an empty path (single empty segment) with 403 via containment guard', async () => {
+  it("rejects an empty path (single empty segment) with 403 via containment guard", async () => {
     // pathSegments.join('/') === '' → path.join(base, '') === base (no trailing sep)
     // → !fullPath.startsWith(base + path.sep) is true → the line-33 branch fires.
     // No '..' is present, so this cannot be caught by the earlier guard.
-    const res = await call([''])
-    expect(res.status).toBe(403)
-    expect(res.body).toBe('Forbidden')
-  })
+    const res = await call([""]);
+    expect(res.status).toBe(403);
+    expect(res.body).toBe("Forbidden");
+  });
 
-  it('rejects an empty catch-all (no segments) with 403 via containment guard', async () => {
+  it("rejects an empty catch-all (no segments) with 403 via containment guard", async () => {
     // Same reasoning; guards must also handle the [] shape that Next.js
     // can occasionally deliver for a bare /api/docs-image/ hit.
-    const res = await call([])
-    expect(res.status).toBe(403)
-    expect(res.body).toBe('Forbidden')
-  })
-})
+    const res = await call([]);
+    expect(res.status).toBe(403);
+    expect(res.body).toBe("Forbidden");
+  });
+});
diff --git a/src/__tests__/docs-image-route.readfile-throws.test.ts b/src/__tests__/docs-image-route.readfile-throws.test.ts
index a8d5838..becad75 100644
--- a/src/__tests__/docs-image-route.readfile-throws.test.ts
+++ b/src/__tests__/docs-image-route.readfile-throws.test.ts
@@ -1,4 +1,4 @@
-import { describe, it, expect, vi, beforeEach } from 'vitest'
+import { describe, it, expect, vi, beforeEach } from "vitest";
 
 /**
  * Branch coverage for /api/docs-image/[...path]/route.ts line 53 —
@@ -8,46 +8,46 @@ import { describe, it, expect, vi, beforeEach } from 'vitest'
  * text, and must not let the exception escape.
  */
 
-describe('/api/docs-image/[...path] — readFileSync throws yields 500', () => {
-  beforeEach(() => vi.resetModules())
+describe("/api/docs-image/[...path] — readFileSync throws yields 500", () => {
+  beforeEach(() => vi.resetModules());
 
-  it('returns 500 when readFileSync throws for an existing file', async () => {
-    vi.doMock('fs', () => ({
+  it("returns 500 when readFileSync throws for an existing file", async () => {
+    vi.doMock("fs", () => ({
       default: {
         existsSync: () => true,
         readFileSync: () => {
-          throw new Error('EACCES: permission denied')
+          throw new Error("EACCES: permission denied");
         },
       },
-    }))
-    vi.doMock('next/server', () => {
+    }));
+    vi.doMock("next/server", () => {
       class NextResponse {
-        body: unknown
-        status: number
-        headers: Map<string, string>
+        body: unknown;
+        status: number;
+        headers: Map<string, string>;
         constructor(
           body: unknown,
-          init?: { status?: number; headers?: Record<string, string> },
+          init?: { status?: number; headers?: Record<string, string> }
         ) {
-          this.body = body
-          this.status = init?.status ?? 200
-          this.headers = new Map(Object.entries(init?.headers ?? {}))
+          this.body = body;
+          this.status = init?.status ?? 200;
+          this.headers = new Map(Object.entries(init?.headers ?? {}));
         }
       }
-      return { NextRequest: class {}, NextResponse }
-    })
+      return { NextRequest: class {}, NextResponse };
+    });
 
-    const { GET } = await import('../app/api/docs-image/[...path]/route')
-    const params = Promise.resolve({ path: ['ok.png'] })
+    const { GET } = await import("../app/api/docs-image/[...path]/route");
+    const params = Promise.resolve({ path: ["ok.png"] });
     const res = (await GET({} as never, { params })) as unknown as {
-      body: unknown
-      status: number
-    }
+      body: unknown;
+      status: number;
+    };
 
-    expect(res.status).toBe(500)
-    expect(String(res.body)).toBe('Internal Server Error')
+    expect(res.status).toBe(500);
+    expect(String(res.body)).toBe("Internal Server Error");
     // The underlying error text must NOT leak into the response body.
-    expect(String(res.body)).not.toContain('EACCES')
-    expect(String(res.body)).not.toContain('permission denied')
-  })
-})
+    expect(String(res.body)).not.toContain("EACCES");
+    expect(String(res.body)).not.toContain("permission denied");
+  });
+});
diff --git a/src/__tests__/docs-image-route.test.ts b/src/__tests__/docs-image-route.test.ts
index 86c9bbd..1a02912 100644
--- a/src/__tests__/docs-image-route.test.ts
+++ b/src/__tests__/docs-image-route.test.ts
@@ -1,4 +1,4 @@
-import { describe, it, expect, vi, beforeEach } from 'vitest'
+import { describe, it, expect, vi, beforeEach } from "vitest";
 
 /**
  * Unit tests for the /api/docs-image/[...path] route handler.
@@ -15,164 +15,167 @@ import { describe, it, expect, vi, beforeEach } from 'vitest'
 
 const { mockFiles } = vi.hoisted(() => {
   const mockFiles: Record<string, Buffer> = {
-    'diagram.png': Buffer.from([0x89, 0x50, 0x4e, 0x47]),
-    'photo.jpg': Buffer.from([0xff, 0xd8, 0xff, 0xe0]),
-    'photo.jpeg': Buffer.from([0xff, 0xd8, 0xff, 0xe1]),
-    'anim.gif': Buffer.from('GIF89a'),
-    'icon.svg': Buffer.from('<svg/>'),
-    'pic.webp': Buffer.from('RIFF'),
-    'fav.ico': Buffer.from([0x00, 0x00, 0x01, 0x00]),
-    'nested/deep/image.png': Buffer.from([0x89, 0x50]),
-    'no-extension': Buffer.from('opaque'),
-    'file.TXT': Buffer.from('unknown mime'),
-  }
-  return { mockFiles }
-})
+    "diagram.png": Buffer.from([0x89, 0x50, 0x4e, 0x47]),
+    "photo.jpg": Buffer.from([0xff, 0xd8, 0xff, 0xe0]),
+    "photo.jpeg": Buffer.from([0xff, 0xd8, 0xff, 0xe1]),
+    "anim.gif": Buffer.from("GIF89a"),
+    "icon.svg": Buffer.from("<svg/>"),
+    "pic.webp": Buffer.from("RIFF"),
+    "fav.ico": Buffer.from([0x00, 0x00, 0x01, 0x00]),
+    "nested/deep/image.png": Buffer.from([0x89, 0x50]),
+    "no-extension": Buffer.from("opaque"),
+    "file.TXT": Buffer.from("unknown mime"),
+  };
+  return { mockFiles };
+});
 
 // ─── Mocks ───────────────────────────────────────────────────────────
 
-vi.mock('fs', () => {
-  const stripPrefix = (p: string) => p.replace(/.*\/docs\/content\//, '')
+vi.mock("fs", () => {
+  const stripPrefix = (p: string) => p.replace(/.*\/docs\/content\//, "");
   return {
     default: {
       existsSync: (p: string) => stripPrefix(p) in mockFiles,
       readFileSync: (p: string) => mockFiles[stripPrefix(p)],
     },
-  }
-})
+  };
+});
 
 // Minimal NextRequest / NextResponse shims — the route uses only
 // `new NextResponse(body, init)` and does not read from `request`.
-vi.mock('next/server', () => {
+vi.mock("next/server", () => {
   class NextResponse {
-    body: unknown
-    status: number
-    headers: Map<string, string>
-    constructor(body: unknown, init?: { status?: number; headers?: Record<string, string> }) {
-      this.body = body
-      this.status = init?.status ?? 200
-      this.headers = new Map(Object.entries(init?.headers ?? {}))
+    body: unknown;
+    status: number;
+    headers: Map<string, string>;
+    constructor(
+      body: unknown,
+      init?: { status?: number; headers?: Record<string, string> }
+    ) {
+      this.body = body;
+      this.status = init?.status ?? 200;
+      this.headers = new Map(Object.entries(init?.headers ?? {}));
     }
   }
-  return { NextRequest: class {}, NextResponse }
-})
+  return { NextRequest: class {}, NextResponse };
+});
 
 // ─── Helpers ─────────────────────────────────────────────────────────
 
 async function call(pathSegments: string[]) {
-  const { GET } = await import('../app/api/docs-image/[...path]/route')
-  const params = Promise.resolve({ path: pathSegments })
+  const { GET } = await import("../app/api/docs-image/[...path]/route");
+  const params = Promise.resolve({ path: pathSegments });
   // `request` is unused by the handler
   return (await GET({} as never, { params })) as unknown as {
-    body: unknown
-    status: number
-    headers: Map<string, string>
-  }
+    body: unknown;
+    status: number;
+    headers: Map<string, string>;
+  };
 }
 
 // ─── Tests ───────────────────────────────────────────────────────────
 
-describe('/api/docs-image/[...path] — path traversal defense', () => {
-  beforeEach(() => vi.resetModules())
+describe("/api/docs-image/[...path] — path traversal defense", () => {
+  beforeEach(() => vi.resetModules());
 
-  it('rejects .. in the path with 403', async () => {
-    const res = await call(['..', 'etc', 'passwd'])
-    expect(res.status).toBe(403)
-    expect(res.body).toBe('Forbidden')
-  })
+  it("rejects .. in the path with 403", async () => {
+    const res = await call(["..", "etc", "passwd"]);
+    expect(res.status).toBe(403);
+    expect(res.body).toBe("Forbidden");
+  });
 
-  it('rejects .. embedded in a segment with 403', async () => {
+  it("rejects .. embedded in a segment with 403", async () => {
     // '..foo' technically contains '..' — the guard is conservative
-    const res = await call(['..foo', 'diagram.png'])
-    expect(res.status).toBe(403)
-  })
+    const res = await call(["..foo", "diagram.png"]);
+    expect(res.status).toBe(403);
+  });
 
-  it('rejects a nested .. that would climb out of docs/content', async () => {
-    const res = await call(['nested', '..', '..', 'secret.png'])
-    expect(res.status).toBe(403)
-  })
+  it("rejects a nested .. that would climb out of docs/content", async () => {
+    const res = await call(["nested", "..", "..", "secret.png"]);
+    expect(res.status).toBe(403);
+  });
 
-  it('rejects an absolute-looking path segment that escapes prefix', async () => {
+  it("rejects an absolute-looking path segment that escapes prefix", async () => {
     // path.join collapses '/etc/passwd' with the base and the containment
     // check `fullPath.startsWith(base + sep)` catches any escape that
     // survives the '..' check.
-    const res = await call(['nested', '..hidden'])
-    expect(res.status).toBe(403)
-  })
-})
-
-describe('/api/docs-image/[...path] — successful lookups', () => {
-  beforeEach(() => vi.resetModules())
-
-  it('serves a PNG with image/png Content-Type', async () => {
-    const res = await call(['diagram.png'])
-    expect(res.status).toBe(200)
-    expect(res.headers.get('Content-Type')).toBe('image/png')
-    expect(res.headers.get('Cache-Control')).toBe(
-      'public, max-age=31536000, immutable'
-    )
-  })
-
-  it('serves a nested image', async () => {
-    const res = await call(['nested', 'deep', 'image.png'])
-    expect(res.status).toBe(200)
-    expect(res.headers.get('Content-Type')).toBe('image/png')
-  })
+    const res = await call(["nested", "..hidden"]);
+    expect(res.status).toBe(403);
+  });
+});
+
+describe("/api/docs-image/[...path] — successful lookups", () => {
+  beforeEach(() => vi.resetModules());
+
+  it("serves a PNG with image/png Content-Type", async () => {
+    const res = await call(["diagram.png"]);
+    expect(res.status).toBe(200);
+    expect(res.headers.get("Content-Type")).toBe("image/png");
+    expect(res.headers.get("Cache-Control")).toBe(
+      "public, max-age=31536000, immutable"
+    );
+  });
+
+  it("serves a nested image", async () => {
+    const res = await call(["nested", "deep", "image.png"]);
+    expect(res.status).toBe(200);
+    expect(res.headers.get("Content-Type")).toBe("image/png");
+  });
 
   it.each([
-    ['photo.jpg', 'image/jpeg'],
-    ['photo.jpeg', 'image/jpeg'],
-    ['anim.gif', 'image/gif'],
-    ['icon.svg', 'image/svg+xml'],
-    ['pic.webp', 'image/webp'],
-    ['fav.ico', 'image/x-icon'],
-  ])('maps %s to %s', async (file, mime) => {
-    const res = await call([file])
-    expect(res.status).toBe(200)
-    expect(res.headers.get('Content-Type')).toBe(mime)
-  })
-
-  it('serves SVG with a sandboxing CSP so inline script cannot run', async () => {
-    const res = await call(['icon.svg'])
-    expect(res.status).toBe(200)
-    expect(res.headers.get('Content-Type')).toBe('image/svg+xml')
-    expect(res.headers.get('Content-Security-Policy')).toBe(
+    ["photo.jpg", "image/jpeg"],
+    ["photo.jpeg", "image/jpeg"],
+    ["anim.gif", "image/gif"],
+    ["icon.svg", "image/svg+xml"],
+    ["pic.webp", "image/webp"],
+    ["fav.ico", "image/x-icon"],
+  ])("maps %s to %s", async (file, mime) => {
+    const res = await call([file]);
+    expect(res.status).toBe(200);
+    expect(res.headers.get("Content-Type")).toBe(mime);
+  });
+
+  it("serves SVG with a sandboxing CSP so inline script cannot run", async () => {
+    const res = await call(["icon.svg"]);
+    expect(res.status).toBe(200);
+    expect(res.headers.get("Content-Type")).toBe("image/svg+xml");
+    expect(res.headers.get("Content-Security-Policy")).toBe(
       "default-src 'none'; style-src 'unsafe-inline'; sandbox"
-    )
-    expect(res.headers.get('Content-Disposition')).toBe('inline')
-  })
-
-  it('does not attach the SVG CSP to raster images', async () => {
-    const res = await call(['diagram.png'])
-    expect(res.headers.has('Content-Security-Policy')).toBe(false)
-    expect(res.headers.has('Content-Disposition')).toBe(false)
-  })
-
-  it('returns 404 for unknown extensions even when the file exists', async () => {
-    const res = await call(['file.TXT'])
+    );
+    expect(res.headers.get("Content-Disposition")).toBe("inline");
+  });
+
+  it("does not attach the SVG CSP to raster images", async () => {
+    const res = await call(["diagram.png"]);
+    expect(res.headers.has("Content-Security-Policy")).toBe(false);
+    expect(res.headers.has("Content-Disposition")).toBe(false);
+  });
+
+  it("returns 404 for unknown extensions even when the file exists", async () => {
+    const res = await call(["file.TXT"]);
     // Extension is lowercased then looked up — '.txt' is not in the allowlist
-    expect(res.status).toBe(404)
-    expect(res.body).toBe('Not Found')
-  })
-
-  it('returns 404 when there is no extension even when the file exists', async () => {
-    const res = await call(['no-extension'])
-    expect(res.status).toBe(404)
-    expect(res.body).toBe('Not Found')
-  })
-})
-
-describe('/api/docs-image/[...path] — missing files', () => {
-  beforeEach(() => vi.resetModules())
-
-  it('returns 404 for a file that does not exist', async () => {
-    const res = await call(['does-not-exist.png'])
-    expect(res.status).toBe(404)
-    expect(res.body).toBe('Not Found')
-  })
-
-  it('returns 404 for a nonexistent nested path', async () => {
-    const res = await call(['nested', 'missing.png'])
-    expect(res.status).toBe(404)
-  })
-})
+    expect(res.status).toBe(404);
+    expect(res.body).toBe("Not Found");
+  });
+
+  it("returns 404 when there is no extension even when the file exists", async () => {
+    const res = await call(["no-extension"]);
+    expect(res.status).toBe(404);
+    expect(res.body).toBe("Not Found");
+  });
+});
+
+describe("/api/docs-image/[...path] — missing files", () => {
+  beforeEach(() => vi.resetModules());
+
+  it("returns 404 for a file that does not exist", async () => {
+    const res = await call(["does-not-exist.png"]);
+    expect(res.status).toBe(404);
+    expect(res.body).toBe("Not Found");
+  });
+
+  it("returns 404 for a nonexistent nested path", async () => {
+    const res = await call(["nested", "missing.png"]);
+    expect(res.status).toBe(404);
+  });
+});
diff --git a/src/__tests__/docs-layout.metadata-jsonld.test.tsx b/src/__tests__/docs-layout.metadata-jsonld.test.tsx
index bd61234..e849c98 100644
--- a/src/__tests__/docs-layout.metadata-jsonld.test.tsx
+++ b/src/__tests__/docs-layout.metadata-jsonld.test.tsx
@@ -5,196 +5,254 @@
  * what search engines index for docs.hivecommons.dev, so a typo in a URL or
  * a malformed JSON-LD entry ships silently without a test here.
  */
-import { afterEach, describe, expect, it, vi } from 'vitest'
-import { renderToStaticMarkup } from 'react-dom/server'
-import type { ReactNode } from 'react'
+import { afterEach, describe, expect, it, vi } from "vitest";
+import { renderToStaticMarkup } from "react-dom/server";
+import type { ReactNode } from "react";
 
 // globals.css goes through Next's Tailwind PostCSS plugin, which vite's CSS
 // pipeline cannot load under vitest; the layout only needs the side-effect.
-vi.mock('../app/globals.css', () => ({}))
+vi.mock("../app/globals.css", () => ({}));
 
 // next/font/local reads woff2 files from disk at build time via SWC; under
 // vitest it has no loader, so return the same shape ({ variable, className }).
-vi.mock('next/font/local', () => ({
+vi.mock("next/font/local", () => ({
   default: (opts: { variable: string }) => ({
     variable: opts.variable,
     className: `${opts.variable}-class`,
   }),
-}))
+}));
 
 // The chrome components pull in client hooks and fetches that are covered by
 // their own behavior tests; replace them so this test exercises only the
 // layout's own output.
-vi.mock('@/components/docs/index', () => ({
+vi.mock("@/components/docs/index", () => ({
   DocsNavbar: () => <nav data-testid="navbar" />,
   DocsFooter: () => <footer data-testid="footer" />,
-}))
-vi.mock('@/components/docs/DocsProvider', () => ({
+}));
+vi.mock("@/components/docs/DocsProvider", () => ({
   DocsProvider: ({ children }: { children: ReactNode }) => <>{children}</>,
-}))
-vi.mock('@/components/docs/MobileOverlay', () => ({
+}));
+vi.mock("@/components/docs/MobileOverlay", () => ({
   MobileOverlay: () => <div data-testid="overlay" />,
-}))
-vi.mock('next-themes', () => ({
+}));
+vi.mock("next-themes", () => ({
   ThemeProvider: ({ children }: { children: ReactNode }) => <>{children}</>,
-}))
+}));
 
-type JsonLdEntry = Record<string, unknown> & { '@context': string; '@type': string; name: string }
+type JsonLdEntry = Record<string, unknown> & {
+  "@context": string;
+  "@type": string;
+  name: string;
+};
 
 async function loadLayout() {
-  return import('../app/docs/layout')
+  return import("../app/docs/layout");
 }
 
 async function renderLayoutHtml(children: ReactNode = null): Promise<string> {
-  const { default: DocsLayout } = await loadLayout()
-  return renderToStaticMarkup(await DocsLayout({ children }))
+  const { default: DocsLayout } = await loadLayout();
+  return renderToStaticMarkup(await DocsLayout({ children }));
 }
 
 function extractJsonLd(html: string): JsonLdEntry[] {
-  const match = html.match(/<script type="application\/ld\+json">([\s\S]*?)<\/script>/)
-  expect(match, 'layout must embed exactly one ld+json script').not.toBeNull()
-  return JSON.parse(match![1]) as JsonLdEntry[]
+  const match = html.match(
+    /<script type="application\/ld\+json">([\s\S]*?)<\/script>/
+  );
+  expect(match, "layout must embed exactly one ld+json script").not.toBeNull();
+  return JSON.parse(match![1]) as JsonLdEntry[];
 }
 
 afterEach(() => {
-  vi.restoreAllMocks()
-})
-
-describe('docs layout metadata', () => {
-  it('anchors every absolute URL on the docs site origin', async () => {
-    const { metadata } = await loadLayout()
-    const base = metadata.metadataBase as URL
-    expect(base).toBeInstanceOf(URL)
-    expect(base.origin).toBe('https://docs.hivecommons.dev')
-
-    const og = metadata.openGraph as { url: string; type: string; locale: string; siteName: string }
-    expect(og.url).toBe(`${base.origin}/docs`)
-    expect(og.type).toBe('website')
-    expect(og.locale).toBe('en_US')
-    expect(og.siteName).toBe('Hive Commons')
-
-    expect(metadata.alternates?.canonical).toBe('/docs')
-  })
-
-  it('uses a title template so child pages get the site suffix', async () => {
-    const { metadata } = await loadLayout()
-    const title = metadata.title as { default: string; template: string }
-    expect(title.template).toContain('%s')
-    expect(title.template).toMatch(/Hive Commons Docs$/)
-    expect(title.default.length).toBeGreaterThan(0)
+  vi.restoreAllMocks();
+});
+
+describe("docs layout metadata", () => {
+  it("anchors every absolute URL on the docs site origin", async () => {
+    const { metadata } = await loadLayout();
+    const base = metadata.metadataBase as URL;
+    expect(base).toBeInstanceOf(URL);
+    expect(base.origin).toBe("https://docs.hivecommons.dev");
+
+    const og = metadata.openGraph as {
+      url: string;
+      type: string;
+      locale: string;
+      siteName: string;
+    };
+    expect(og.url).toBe(`${base.origin}/docs`);
+    expect(og.type).toBe("website");
+    expect(og.locale).toBe("en_US");
+    expect(og.siteName).toBe("Hive Commons");
+
+    expect(metadata.alternates?.canonical).toBe("/docs");
+  });
+
+  it("uses a title template so child pages get the site suffix", async () => {
+    const { metadata } = await loadLayout();
+    const title = metadata.title as { default: string; template: string };
+    expect(title.template).toContain("%s");
+    expect(title.template).toMatch(/Hive Commons Docs$/);
+    expect(title.default.length).toBeGreaterThan(0);
     // OG and Twitter cards repeat the default title/description verbatim.
-    const og = metadata.openGraph as { title: string; description: string }
-    const tw = metadata.twitter as { title: string; description: string; card: string }
-    expect(og.title).toBe(title.default)
-    expect(tw.title).toBe(title.default)
-    expect(og.description).toBe(metadata.description)
-    expect(tw.description).toBe(metadata.description)
-    expect(tw.card).toBe('summary_large_image')
-  })
-
-  it('shares a single OG image between Open Graph and Twitter with 1200x630 dimensions', async () => {
-    const { metadata } = await loadLayout()
-    const og = metadata.openGraph as { images: Array<{ url: string; width: number; height: number; alt: string }> }
-    const tw = metadata.twitter as { images: string[] }
-    expect(og.images).toHaveLength(1)
-    expect(og.images[0]).toMatchObject({ url: '/hive-commons-og.png', width: 1200, height: 630 })
-    expect(og.images[0].alt.length).toBeGreaterThan(0)
-    expect(tw.images).toEqual([og.images[0].url])
-  })
-
-  it('allows indexing and lists integration and Spektacular keywords', async () => {
-    const { metadata } = await loadLayout()
-    expect(metadata.robots).toEqual({ index: true, follow: true })
-    const keywords = metadata.keywords as string[]
-    expect(Array.isArray(keywords)).toBe(true)
-    expect(new Set(keywords).size).toBe(keywords.length)
-    for (const k of ['Claude Code', 'GitHub Copilot CLI', 'vLLM', 'Spektacular', 'Spek', 'speks']) {
-      expect(keywords).toContain(k)
+    const og = metadata.openGraph as { title: string; description: string };
+    const tw = metadata.twitter as {
+      title: string;
+      description: string;
+      card: string;
+    };
+    expect(og.title).toBe(title.default);
+    expect(tw.title).toBe(title.default);
+    expect(og.description).toBe(metadata.description);
+    expect(tw.description).toBe(metadata.description);
+    expect(tw.card).toBe("summary_large_image");
+  });
+
+  it("shares a single OG image between Open Graph and Twitter with 1200x630 dimensions", async () => {
+    const { metadata } = await loadLayout();
+    const og = metadata.openGraph as {
+      images: Array<{
+        url: string;
+        width: number;
+        height: number;
+        alt: string;
+      }>;
+    };
+    const tw = metadata.twitter as { images: string[] };
+    expect(og.images).toHaveLength(1);
+    expect(og.images[0]).toMatchObject({
+      url: "/hive-commons-og.png",
+      width: 1200,
+      height: 630,
+    });
+    expect(og.images[0].alt.length).toBeGreaterThan(0);
+    expect(tw.images).toEqual([og.images[0].url]);
+  });
+
+  it("allows indexing and lists integration and Spektacular keywords", async () => {
+    const { metadata } = await loadLayout();
+    expect(metadata.robots).toEqual({ index: true, follow: true });
+    const keywords = metadata.keywords as string[];
+    expect(Array.isArray(keywords)).toBe(true);
+    expect(new Set(keywords).size).toBe(keywords.length);
+    for (const k of [
+      "Claude Code",
+      "GitHub Copilot CLI",
+      "vLLM",
+      "Spektacular",
+      "Spek",
+      "speks",
+    ]) {
+      expect(keywords).toContain(k);
     }
-  })
-})
-
-describe('docs layout JSON-LD', () => {
-  it('embeds a parseable schema.org graph with Hive, Spektacular and the Hive Commons org', async () => {
-    const html = await renderLayoutHtml()
-    const entries = extractJsonLd(html)
-    expect(entries.map((e) => e['@type'])).toEqual([
-      'SoftwareApplication',
-      'SoftwareApplication',
-      'Organization',
-    ])
-    expect(entries.map((e) => e.name)).toEqual(['Hive', 'Spektacular', 'Hive Commons'])
+  });
+});
+
+describe("docs layout JSON-LD", () => {
+  it("embeds a parseable schema.org graph with Hive, Spektacular and the Hive Commons org", async () => {
+    const html = await renderLayoutHtml();
+    const entries = extractJsonLd(html);
+    expect(entries.map(e => e["@type"])).toEqual([
+      "SoftwareApplication",
+      "SoftwareApplication",
+      "Organization",
+    ]);
+    expect(entries.map(e => e.name)).toEqual([
+      "Hive",
+      "Spektacular",
+      "Hive Commons",
+    ]);
     for (const e of entries) {
-      expect(e['@context']).toBe('https://schema.org')
-      expect(String(e.url)).toMatch(/^https:\/\/([a-z]+\.)?hivecommons\.dev\/$|^https:\/\/spektacular\.dev\/$/)
+      expect(e["@context"]).toBe("https://schema.org");
+      expect(String(e.url)).toMatch(
+        /^https:\/\/([a-z]+\.)?hivecommons\.dev\/$|^https:\/\/spektacular\.dev\/$/
+      );
     }
-  })
+  });
 
-  it('points both SoftwareApplication entries at Apache-2.0 and a hivecommons GitHub repo', async () => {
-    const entries = extractJsonLd(await renderLayoutHtml())
-    const apps = entries.filter((e) => e['@type'] === 'SoftwareApplication')
-    expect(apps).toHaveLength(2)
+  it("points both SoftwareApplication entries at Apache-2.0 and a hivecommons GitHub repo", async () => {
+    const entries = extractJsonLd(await renderLayoutHtml());
+    const apps = entries.filter(e => e["@type"] === "SoftwareApplication");
+    expect(apps).toHaveLength(2);
     for (const app of apps) {
-      expect(app.license).toBe('https://www.apache.org/licenses/LICENSE-2.0')
-      expect(String(app.codeRepository)).toMatch(/^https:\/\/github\.com\/hivecommons\/[a-z-]+$/)
-      expect(app.applicationCategory).toBe('DeveloperApplication')
-      expect(app.operatingSystem).toBe('Linux, macOS')
-      const features = app.featureList as string[]
-      expect(features.length).toBeGreaterThan(0)
-      expect(typeof app.keywords).toBe('string')
+      expect(app.license).toBe("https://www.apache.org/licenses/LICENSE-2.0");
+      expect(String(app.codeRepository)).toMatch(
+        /^https:\/\/github\.com\/hivecommons\/[a-z-]+$/
+      );
+      expect(app.applicationCategory).toBe("DeveloperApplication");
+      expect(app.operatingSystem).toBe("Linux, macOS");
+      const features = app.featureList as string[];
+      expect(features.length).toBeGreaterThan(0);
+      expect(typeof app.keywords).toBe("string");
     }
-    const spek = apps.find((a) => a.name === 'Spektacular')!
-    expect(spek.alternateName).toBe('Spek')
-  })
+    const spek = apps.find(a => a.name === "Spektacular")!;
+    expect(spek.alternateName).toBe("Spek");
+  });
 
   it("keeps the Hive entry's keywords in sync with the page metadata keywords", async () => {
-    const { metadata } = await loadLayout()
-    const entries = extractJsonLd(await renderLayoutHtml())
-    const hive = entries.find((e) => e.name === 'Hive')!
-    const ldKeywords = String(hive.keywords).split(', ')
-    expect(ldKeywords).toEqual(metadata.keywords)
-  })
-
-  it('lists the same infrastructure sponsors as both sponsor and funder, each with an https url', async () => {
-    const entries = extractJsonLd(await renderLayoutHtml())
-    const org = entries.find((e) => e['@type'] === 'Organization')!
-    const sponsors = org.sponsor as Array<{ '@type': string; name: string; url: string }>
-    expect(sponsors.length).toBeGreaterThan(0)
-    expect(org.funder).toEqual(sponsors)
+    const { metadata } = await loadLayout();
+    const entries = extractJsonLd(await renderLayoutHtml());
+    const hive = entries.find(e => e.name === "Hive")!;
+    const ldKeywords = String(hive.keywords).split(", ");
+    expect(ldKeywords).toEqual(metadata.keywords);
+  });
+
+  it("lists the same infrastructure sponsors as both sponsor and funder, each with an https url", async () => {
+    const entries = extractJsonLd(await renderLayoutHtml());
+    const org = entries.find(e => e["@type"] === "Organization")!;
+    const sponsors = org.sponsor as Array<{
+      "@type": string;
+      name: string;
+      url: string;
+    }>;
+    expect(sponsors.length).toBeGreaterThan(0);
+    expect(org.funder).toEqual(sponsors);
     for (const s of sponsors) {
-      expect(s['@type']).toBe('Organization')
-      expect(s.name.length).toBeGreaterThan(0)
-      expect(s.url).toMatch(/^https:\/\//)
+      expect(s["@type"]).toBe("Organization");
+      expect(s.name.length).toBeGreaterThan(0);
+      expect(s.url).toMatch(/^https:\/\//);
     }
-    expect(new Set(sponsors.map((s) => s.name)).size).toBe(sponsors.length)
-  })
+    expect(new Set(sponsors.map(s => s.name)).size).toBe(sponsors.length);
+  });
 
   it('serializes without a raw "</script>" that could break out of the ld+json block', async () => {
-    const html = await renderLayoutHtml()
-    const scripts = html.match(/<script type="application\/ld\+json">/g) ?? []
-    expect(scripts).toHaveLength(1)
-    const inner = html.match(/<script type="application\/ld\+json">([\s\S]*?)<\/script>/)![1]
-    expect(inner).not.toContain('</script')
-  })
-})
-
-describe('docs layout shell', () => {
-  it('renders an English <html> with the three self-hosted font variables on <body>', async () => {
-    const html = await renderLayoutHtml(<main data-testid="child">page</main>)
-    expect(html).toMatch(/^<html lang="en"/)
-    const body = html.match(/<body class="([^"]+)"/)
-    expect(body).not.toBeNull()
-    for (const v of ['--font-inter', '--font-fraunces', '--font-jetbrains-mono', 'antialiased']) {
-      expect(body![1]).toContain(v)
+    const html = await renderLayoutHtml();
+    const scripts = html.match(/<script type="application\/ld\+json">/g) ?? [];
+    expect(scripts).toHaveLength(1);
+    const inner = html.match(
+      /<script type="application\/ld\+json">([\s\S]*?)<\/script>/
+    )![1];
+    expect(inner).not.toContain("</script");
+  });
+});
+
+describe("docs layout shell", () => {
+  it("renders an English <html> with the three self-hosted font variables on <body>", async () => {
+    const html = await renderLayoutHtml(<main data-testid="child">page</main>);
+    expect(html).toMatch(/^<html lang="en"/);
+    const body = html.match(/<body class="([^"]+)"/);
+    expect(body).not.toBeNull();
+    for (const v of [
+      "--font-inter",
+      "--font-fraunces",
+      "--font-jetbrains-mono",
+      "antialiased",
+    ]) {
+      expect(body![1]).toContain(v);
     }
-  })
-
-  it('places children between the navbar/overlay and the footer', async () => {
-    const html = await renderLayoutHtml(<main data-testid="child">page</main>)
-    const idx = (s: string) => html.indexOf(s)
-    expect(idx('data-testid="navbar"')).toBeGreaterThan(-1)
-    expect(idx('data-testid="navbar"')).toBeLessThan(idx('data-testid="overlay"'))
-    expect(idx('data-testid="overlay"')).toBeLessThan(idx('data-testid="child"'))
-    expect(idx('data-testid="child"')).toBeLessThan(idx('data-testid="footer"'))
-  })
-})
+  });
+
+  it("places children between the navbar/overlay and the footer", async () => {
+    const html = await renderLayoutHtml(<main data-testid="child">page</main>);
+    const idx = (s: string) => html.indexOf(s);
+    expect(idx('data-testid="navbar"')).toBeGreaterThan(-1);
+    expect(idx('data-testid="navbar"')).toBeLessThan(
+      idx('data-testid="overlay"')
+    );
+    expect(idx('data-testid="overlay"')).toBeLessThan(
+      idx('data-testid="child"')
+    );
+    expect(idx('data-testid="child"')).toBeLessThan(
+      idx('data-testid="footer"')
+    );
+  });
+});
diff --git a/src/__tests__/docs-page-render.spektacular.test.ts b/src/__tests__/docs-page-render.spektacular.test.ts
index ae486fa..405873d 100644
--- a/src/__tests__/docs-page-render.spektacular.test.ts
+++ b/src/__tests__/docs-page-render.spektacular.test.ts
@@ -10,105 +10,143 @@
  *
  * The mocks mirror src/__tests__/docs-page-render.test.ts; see there for why.
  */
-import { describe, expect, it, vi } from 'vitest'
-import { createElement, type ReactNode } from 'react'
-import { renderToStaticMarkup } from 'react-dom/server'
+import { describe, expect, it, vi } from "vitest";
+import { createElement, type ReactNode } from "react";
+import { renderToStaticMarkup } from "react-dom/server";
 
-vi.mock('nextra/evaluate', async () => {
-  const runtime = await import('react/jsx-runtime')
+vi.mock("nextra/evaluate", async () => {
+  const runtime = await import("react/jsx-runtime");
   return {
-    evaluate(rawJs: string, components = {}, scope: Record<string, unknown> = {}) {
-      const keys = Object.keys(scope)
-      const values = Object.values(scope)
-      const hydrateFn = Reflect.construct(Function, ['$', ...keys, rawJs])
-      return hydrateFn({ ...runtime, useMDXComponents: () => components }, ...values)
+    evaluate(
+      rawJs: string,
+      components = {},
+      scope: Record<string, unknown> = {}
+    ) {
+      const keys = Object.keys(scope);
+      const values = Object.values(scope);
+      const hydrateFn = Reflect.construct(Function, ["$", ...keys, rawJs]);
+      return hydrateFn(
+        { ...runtime, useMDXComponents: () => components },
+        ...values
+      );
     },
-  }
-})
+  };
+});
 
-vi.mock('next/navigation', async (importOriginal) => {
-  const actual = await importOriginal<typeof import('next/navigation')>()
+vi.mock("next/navigation", async importOriginal => {
+  const actual = await importOriginal<typeof import("next/navigation")>();
   return {
     ...actual,
-    usePathname: () => '/docs/spektacular/overview/introduction',
-  }
-})
+    usePathname: () => "/docs/spektacular/overview/introduction",
+  };
+});
 
-vi.mock('next/link', async () => {
-  const { createElement: h } = await import('react')
+vi.mock("next/link", async () => {
+  const { createElement: h } = await import("react");
   return {
     default: ({
       href,
       children,
       ...rest
     }: { href?: unknown; children?: ReactNode } & Record<string, unknown>) =>
-      h('a', { ...rest, href: typeof href === 'string' ? href : undefined }, children),
-  }
-})
+      h(
+        "a",
+        { ...rest, href: typeof href === "string" ? href : undefined },
+        children
+      ),
+  };
+});
 
-import { DocsProvider } from '../components/docs/DocsProvider'
-import DocPage from '../app/docs/[...slug]/page'
+import { DocsProvider } from "../components/docs/DocsProvider";
+import DocPage from "../app/docs/[...slug]/page";
 
 async function renderDocsRoute(slug: string[]): Promise<string> {
-  const page = await DocPage({ params: Promise.resolve({ slug }) })
-  return renderToStaticMarkup(createElement(DocsProvider, null, page))
+  const page = await DocPage({ params: Promise.resolve({ slug }) });
+  return renderToStaticMarkup(createElement(DocsProvider, null, page));
 }
 
-const RENDER_TIMEOUT_MS = 60_000
+const RENDER_TIMEOUT_MS = 60_000;
 
 // Route -> the H1 the synced page must render with.
 const SPEKTACULAR_PAGES: Array<{ slug: string[]; h1: string }> = [
-  { slug: ['spektacular', 'overview', 'introduction'], h1: 'Spektacular' },
-  { slug: ['spektacular', 'tutorials', 'getting-started'], h1: 'How to use Spektacular' },
-  { slug: ['spektacular', 'tutorials', 'unknown-criteria'], h1: 'Dealing with unknown criteria' },
-  { slug: ['spektacular', 'guides', 'knowledge-base'], h1: 'The Knowledge Base' },
-]
+  { slug: ["spektacular", "overview", "introduction"], h1: "Spektacular" },
+  {
+    slug: ["spektacular", "tutorials", "getting-started"],
+    h1: "How to use Spektacular",
+  },
+  {
+    slug: ["spektacular", "tutorials", "unknown-criteria"],
+    h1: "Dealing with unknown criteria",
+  },
+  {
+    slug: ["spektacular", "guides", "knowledge-base"],
+    h1: "The Knowledge Base",
+  },
+];
 
-describe('Spektacular synced pages render', () => {
+describe("Spektacular synced pages render", () => {
   for (const { slug, h1 } of SPEKTACULAR_PAGES) {
     it(
-      `/docs/${slug.join('/')} compiles and renders its heading`,
+      `/docs/${slug.join("/")} compiles and renders its heading`,
       async () => {
-        const html = await renderDocsRoute(slug)
-        expect(html).toMatch(/<article[^>]+class="[^"]*\bprose\b[^"]*"/)
+        const html = await renderDocsRoute(slug);
+        expect(html).toMatch(/<article[^>]+class="[^"]*\bprose\b[^"]*"/);
         // The plain-text fallback wraps the whole source in a single <pre>
         // that starts with the synced-from blockquote marker.
-        expect(html).not.toMatch(/<pre>&gt; \*\*Synced from/)
-        expect(html).toMatch(new RegExp(`<h1[^>]*>[^<]*${h1}`))
-        expect(html).toMatch(/<h2[^>]*>/)
-        expect(html).toContain('spektacular.dev')
+        expect(html).not.toMatch(/<pre>&gt; \*\*Synced from/);
+        expect(html).toMatch(new RegExp(`<h1[^>]*>[^<]*${h1}`));
+        expect(html).toMatch(/<h2[^>]*>/);
+        expect(html).toContain("spektacular.dev");
       },
       RENDER_TIMEOUT_MS
-    )
+    );
   }
 
   // The content path is flattened by the sync (docs/knowledge-base.md ->
   // knowledge-base.md; tutorials come from spektacular-website), so the
   // source/edit buttons must follow the banner's canonical URL, not the path.
   it(
-    'points View Source / Compose a PR at the un-flattened upstream file',
+    "points View Source / Compose a PR at the un-flattened upstream file",
     async () => {
-      const kb = await renderDocsRoute(['spektacular', 'guides', 'knowledge-base'])
-      expect(kb).toContain('href="https://github.com/hivecommons/spektacular/blob/main/docs/knowledge-base.md"')
-      expect(kb).toContain('href="https://github.com/hivecommons/spektacular/edit/main/docs/knowledge-base.md?fork=true"')
-      expect(kb).not.toContain('/blob/main/knowledge-base.md"')
+      const kb = await renderDocsRoute([
+        "spektacular",
+        "guides",
+        "knowledge-base",
+      ]);
+      expect(kb).toContain(
+        'href="https://github.com/hivecommons/spektacular/blob/main/docs/knowledge-base.md"'
+      );
+      expect(kb).toContain(
+        'href="https://github.com/hivecommons/spektacular/edit/main/docs/knowledge-base.md?fork=true"'
+      );
+      expect(kb).not.toContain('/blob/main/knowledge-base.md"');
 
-      const tut = await renderDocsRoute(['spektacular', 'tutorials', 'getting-started'])
+      const tut = await renderDocsRoute([
+        "spektacular",
+        "tutorials",
+        "getting-started",
+      ]);
       expect(tut).toContain(
         'href="https://github.com/hivecommons/spektacular-website/blob/main/src/content/tutorials/getting-started.mdx"'
-      )
+      );
     },
     RENDER_TIMEOUT_MS
-  )
+  );
 
   it(
-    'serves tutorial screenshots through the docs-image route',
+    "serves tutorial screenshots through the docs-image route",
     async () => {
-      const html = await renderDocsRoute(['spektacular', 'tutorials', 'getting-started'])
-      expect(html).toMatch(/src="\/docs-images\/spektacular\/images\/tutorials\/getting-started\/[a-z-]+\.png"/)
+      const html = await renderDocsRoute([
+        "spektacular",
+        "tutorials",
+        "getting-started",
+      ]);
+      expect(html).toMatch(
+        /src="\/docs-images\/spektacular\/images\/tutorials\/getting-started\/[a-z-]+\.png"/
+      );
       // Watch-on-YouTube links replace the site's embedded player.
-      expect(html).toContain('https://youtu.be/ZRVa9gml_Bg?t=108')
+      expect(html).toContain("https://youtu.be/ZRVa9gml_Bg?t=108");
     },
     RENDER_TIMEOUT_MS
-  )
-})
+  );
+});
diff --git a/src/__tests__/docs-page-render.test.ts b/src/__tests__/docs-page-render.test.ts
index bbc5052..9855d94 100644
--- a/src/__tests__/docs-page-render.test.ts
+++ b/src/__tests__/docs-page-render.test.ts
@@ -12,9 +12,9 @@
  * compile -> evaluate -> DocsLayout wrapper) and fails if the prose article
  * wrapper, the heading markup, or the table of contents ever disappear again.
  */
-import { beforeAll, describe, expect, it, vi } from 'vitest'
-import { createElement, type ReactNode } from 'react'
-import { renderToStaticMarkup } from 'react-dom/server'
+import { beforeAll, describe, expect, it, vi } from "vitest";
+import { createElement, type ReactNode } from "react";
+import { renderToStaticMarkup } from "react-dom/server";
 
 // nextra's evaluate() injects react/jsx-dev-runtime whenever NODE_ENV is not
 // "production", while the MDX compiled by compileMdx emits production _jsx()
@@ -24,79 +24,90 @@ import { renderToStaticMarkup } from 'react-dom/server'
 // tiny runtime-injection shim with the production JSX runtime that matches
 // compileMdx's output; the compile step and the DocsLayout wrapper under test
 // stay fully real.
-vi.mock('nextra/evaluate', async () => {
-  const runtime = await import('react/jsx-runtime')
+vi.mock("nextra/evaluate", async () => {
+  const runtime = await import("react/jsx-runtime");
   return {
-    evaluate(rawJs: string, components = {}, scope: Record<string, unknown> = {}) {
-      const keys = Object.keys(scope)
-      const values = Object.values(scope)
-      const hydrateFn = Reflect.construct(Function, ['$', ...keys, rawJs])
-      return hydrateFn({ ...runtime, useMDXComponents: () => components }, ...values)
+    evaluate(
+      rawJs: string,
+      components = {},
+      scope: Record<string, unknown> = {}
+    ) {
+      const keys = Object.keys(scope);
+      const values = Object.values(scope);
+      const hydrateFn = Reflect.construct(Function, ["$", ...keys, rawJs]);
+      return hydrateFn(
+        { ...runtime, useMDXComponents: () => components },
+        ...values
+      );
     },
-  }
-})
+  };
+});
 
 // The DocsLayout tree contains client components that use next/navigation's
 // usePathname (breadcrumb in MobileHeader). Outside a running Next.js app the
 // hook returns null and the breadcrumb code would crash, so pin a pathname.
-vi.mock('next/navigation', async (importOriginal) => {
-  const actual = await importOriginal<typeof import('next/navigation')>()
+vi.mock("next/navigation", async importOriginal => {
+  const actual = await importOriginal<typeof import("next/navigation")>();
   return {
     ...actual,
-    usePathname: () => '/docs/hive/overview/introduction',
-  }
-})
+    usePathname: () => "/docs/hive/overview/introduction",
+  };
+});
 
 // next/link expects Next.js router context; render a plain anchor instead.
-vi.mock('next/link', async () => {
-  const { createElement: h } = await import('react')
+vi.mock("next/link", async () => {
+  const { createElement: h } = await import("react");
   return {
     default: ({
       href,
       children,
       ...rest
     }: { href?: unknown; children?: ReactNode } & Record<string, unknown>) =>
-      h('a', { ...rest, href: typeof href === 'string' ? href : undefined }, children),
-  }
-})
+      h(
+        "a",
+        { ...rest, href: typeof href === "string" ? href : undefined },
+        children
+      ),
+  };
+});
 
-import { DocsProvider } from '../components/docs/DocsProvider'
-import DocPage from '../app/docs/[...slug]/page'
+import { DocsProvider } from "../components/docs/DocsProvider";
+import DocPage from "../app/docs/[...slug]/page";
 
 async function renderDocsRoute(slug: string[]): Promise<string> {
-  const page = await DocPage({ params: Promise.resolve({ slug }) })
-  return renderToStaticMarkup(createElement(DocsProvider, null, page))
+  const page = await DocPage({ params: Promise.resolve({ slug }) });
+  return renderToStaticMarkup(createElement(DocsProvider, null, page));
 }
 
 // The first MDX compile is slow (~10s cold start in CI), well past vitest's
 // 5s default timeout, so render once up front with a generous budget and
 // assert against the shared result.
-const RENDER_TIMEOUT_MS = 60_000
+const RENDER_TIMEOUT_MS = 60_000;
 
-describe('docs page rendering (smoke test)', () => {
-  let html = ''
+describe("docs page rendering (smoke test)", () => {
+  let html = "";
 
   beforeAll(async () => {
-    html = await renderDocsRoute(['hive', 'overview', 'introduction'])
-  }, RENDER_TIMEOUT_MS)
+    html = await renderDocsRoute(["hive", "overview", "introduction"]);
+  }, RENDER_TIMEOUT_MS);
 
-  it('wraps rendered markdown in the prose layout article', () => {
+  it("wraps rendered markdown in the prose layout article", () => {
     // The DocsLayout wrapper must produce the <article class="prose ...">
     // element that all documentation typography in globals.css targets.
     // Without it, headings, lists, tables, and code render as flat text.
-    expect(html).toMatch(/<article[^>]+class="[^"]*\bprose\b[^"]*"/)
-  })
+    expect(html).toMatch(/<article[^>]+class="[^"]*\bprose\b[^"]*"/);
+  });
 
-  it('renders markdown headings as heading elements, not the plain-text fallback', () => {
+  it("renders markdown headings as heading elements, not the plain-text fallback", () => {
     // the hive readme starts with an h1; if MDX compilation silently fails,
     // the page falls back to a <pre> dump with no heading elements at all.
-    expect(html).toMatch(/<h1[^>]*>/)
-    expect(html).toMatch(/<h2[^>]*>/)
-  })
+    expect(html).toMatch(/<h1[^>]*>/);
+    expect(html).toMatch(/<h2[^>]*>/);
+  });
 
-  it('renders the table of contents for the page', () => {
+  it("renders the table of contents for the page", () => {
     // The toc extracted by nextra's evaluate() must reach the layout: the
     // TOC renders anchor links pointing at in-page heading ids.
-    expect(html).toMatch(/href="#[a-z0-9-]+"/)
-  })
-})
+    expect(html).toMatch(/href="#[a-z0-9-]+"/);
+  });
+});
diff --git a/src/__tests__/docs-slug-page.params-metadata.test.tsx b/src/__tests__/docs-slug-page.params-metadata.test.tsx
index d1a7fce..caa82fc 100644
--- a/src/__tests__/docs-slug-page.params-metadata.test.tsx
+++ b/src/__tests__/docs-slug-page.params-metadata.test.tsx
@@ -10,239 +10,274 @@
  * - SlugLayout (layout.tsx): project detection from the slug and Meta-node
  *   stripping of the page map passed to the sidebar.
  */
-import { afterEach, describe, expect, it, vi } from 'vitest'
-import { createElement, type ReactNode } from 'react'
-import { renderToStaticMarkup } from 'react-dom/server'
-import fs from 'fs'
-import os from 'os'
-import path from 'path'
+import { afterEach, describe, expect, it, vi } from "vitest";
+import { createElement, type ReactNode } from "react";
+import { renderToStaticMarkup } from "react-dom/server";
+import fs from "fs";
+import os from "os";
+import path from "path";
 
 // Same runtime-injection shim as docs-page-render.test.ts: nextra's
 // evaluate() injects react/jsx-dev-runtime under NODE_ENV=test while
 // compileMdx emits production _jsx() calls; re-implement it with the
 // production runtime so the two agree.
-vi.mock('nextra/evaluate', async () => {
-  const runtime = await import('react/jsx-runtime')
+vi.mock("nextra/evaluate", async () => {
+  const runtime = await import("react/jsx-runtime");
   return {
-    evaluate(rawJs: string, components = {}, scope: Record<string, unknown> = {}) {
-      const keys = Object.keys(scope)
-      const values = Object.values(scope)
-      const hydrateFn = Reflect.construct(Function, ['$', ...keys, rawJs])
-      return hydrateFn({ ...runtime, useMDXComponents: () => components }, ...values)
+    evaluate(
+      rawJs: string,
+      components = {},
+      scope: Record<string, unknown> = {}
+    ) {
+      const keys = Object.keys(scope);
+      const values = Object.values(scope);
+      const hydrateFn = Reflect.construct(Function, ["$", ...keys, rawJs]);
+      return hydrateFn(
+        { ...runtime, useMDXComponents: () => components },
+        ...values
+      );
     },
-  }
-})
+  };
+});
 
 // notFound() must be observable: replace it with a throwing sentinel.
-const NOT_FOUND = new Error('NEXT_NOT_FOUND (test sentinel)')
-vi.mock('next/navigation', async (importOriginal) => {
-  const actual = await importOriginal<typeof import('next/navigation')>()
+const NOT_FOUND = new Error("NEXT_NOT_FOUND (test sentinel)");
+vi.mock("next/navigation", async importOriginal => {
+  const actual = await importOriginal<typeof import("next/navigation")>();
   return {
     ...actual,
-    usePathname: () => '/docs/hive/integrations',
+    usePathname: () => "/docs/hive/integrations",
     notFound: () => {
-      throw NOT_FOUND
+      throw NOT_FOUND;
     },
-  }
-})
+  };
+});
 
 // next/link expects Next.js router context; render a plain anchor instead.
-vi.mock('next/link', async () => {
-  const { createElement: h } = await import('react')
+vi.mock("next/link", async () => {
+  const { createElement: h } = await import("react");
   return {
     default: ({
       href,
       children,
       ...rest
     }: { href?: unknown; children?: ReactNode } & Record<string, unknown>) =>
-      h('a', { ...rest, href: typeof href === 'string' ? href : undefined }, children),
-  }
-})
+      h(
+        "a",
+        { ...rest, href: typeof href === "string" ? href : undefined },
+        children
+      ),
+  };
+});
 
-import { DocsProvider } from '../components/docs/DocsProvider'
-import DocPage, { generateMetadata, generateStaticParams } from '../app/docs/[...slug]/page'
+import { DocsProvider } from "../components/docs/DocsProvider";
+import DocPage, {
+  generateMetadata,
+  generateStaticParams,
+} from "../app/docs/[...slug]/page";
 
-const RENDER_TIMEOUT_MS = 60_000
+const RENDER_TIMEOUT_MS = 60_000;
 
 async function renderDocsRoute(slug: string[]): Promise<string> {
-  const page = await DocPage({ params: Promise.resolve({ slug }) })
-  return renderToStaticMarkup(createElement(DocsProvider, null, page))
+  const page = await DocPage({ params: Promise.resolve({ slug }) });
+  return renderToStaticMarkup(createElement(DocsProvider, null, page));
 }
 
 afterEach(() => {
-  vi.unstubAllEnvs()
-})
+  vi.unstubAllEnvs();
+});
 
-describe('generateStaticParams', () => {
-  it('walks the content tree and prefixes project routeMap routes', async () => {
-    const params = await generateStaticParams()
-    const keys = new Set(params.map((p) => p.slug.join('/')))
+describe("generateStaticParams", () => {
+  it("walks the content tree and prefixes project routeMap routes", async () => {
+    const params = await generateStaticParams();
+    const keys = new Set(params.map(p => p.slug.join("/")));
 
     // From the docs/content walk (general section, extension stripped).
-    expect(keys.has('community/meetings')).toBe(true)
+    expect(keys.has("community/meetings")).toBe(true);
     // Project-prefixed route from the hive routeMap.
-    expect(keys.has('hive/integrations')).toBe(true)
+    expect(keys.has("hive/integrations")).toBe(true);
 
     // No empty slugs, no duplicates.
     for (const p of params) {
-      expect(p.slug.length).toBeGreaterThan(0)
-      expect(p.slug.every(Boolean)).toBe(true)
+      expect(p.slug.length).toBeGreaterThan(0);
+      expect(p.slug.every(Boolean)).toBe(true);
     }
-    expect(keys.size).toBe(params.length)
-  })
-
-  it('routes general sections at the top level, not under every project', async () => {
-    const params = await generateStaticParams()
-    const keys = new Set(params.map((p) => p.slug.join('/')))
-    expect(keys.has('pluk/community/meetings')).toBe(false)
-    expect(keys.has('dibs/community/meetings')).toBe(false)
-  })
-
-  it('adds hive routes for each directory under HIVE_DOCS_PATH when set', async () => {
-    const dir = fs.mkdtempSync(path.join(os.tmpdir(), 'docs-hive-docs-'))
+    expect(keys.size).toBe(params.length);
+  });
+
+  it("routes general sections at the top level, not under every project", async () => {
+    const params = await generateStaticParams();
+    const keys = new Set(params.map(p => p.slug.join("/")));
+    expect(keys.has("pluk/community/meetings")).toBe(false);
+    expect(keys.has("dibs/community/meetings")).toBe(false);
+  });
+
+  it("adds hive routes for each directory under HIVE_DOCS_PATH when set", async () => {
+    const dir = fs.mkdtempSync(path.join(os.tmpdir(), "docs-hive-docs-"));
     try {
-      fs.mkdirSync(path.join(dir, 'extra-guide'))
-      fs.writeFileSync(path.join(dir, 'loose-file.md'), '# not a directory')
+      fs.mkdirSync(path.join(dir, "extra-guide"));
+      fs.writeFileSync(path.join(dir, "loose-file.md"), "# not a directory");
 
-      vi.stubEnv('HIVE_DOCS_PATH', dir)
-      vi.resetModules()
-      const fresh = await import('../app/docs/[...slug]/page')
-      const params = await fresh.generateStaticParams()
-      const keys = new Set(params.map((p: { slug: string[] }) => p.slug.join('/')))
+      vi.stubEnv("HIVE_DOCS_PATH", dir);
+      vi.resetModules();
+      const fresh = await import("../app/docs/[...slug]/page");
+      const params = await fresh.generateStaticParams();
+      const keys = new Set(
+        params.map((p: { slug: string[] }) => p.slug.join("/"))
+      );
 
-      expect(keys.has('hive/extra-guide')).toBe(true)
+      expect(keys.has("hive/extra-guide")).toBe(true);
       // Plain files under HIVE_DOCS_PATH are skipped (directories only).
-      expect(keys.has('hive/loose-file.md')).toBe(false)
-      expect(keys.has('hive/loose-file')).toBe(false)
+      expect(keys.has("hive/loose-file.md")).toBe(false);
+      expect(keys.has("hive/loose-file")).toBe(false);
     } finally {
-      vi.resetModules()
-      fs.rmSync(dir, { recursive: true, force: true })
+      vi.resetModules();
+      fs.rmSync(dir, { recursive: true, force: true });
     }
-  })
-})
+  });
+});
 
-describe('generateMetadata', () => {
-  it('returns the SEO metadata block for hive/integrations', async () => {
+describe("generateMetadata", () => {
+  it("returns the SEO metadata block for hive/integrations", async () => {
     const meta = await generateMetadata({
-      params: Promise.resolve({ slug: ['hive', 'integrations'] }),
-    })
-    expect(meta.title).toBe('Supported agents & inference engines')
-    expect(meta.alternates?.canonical).toBe('/docs/hive/integrations')
-    expect(meta.openGraph?.url).toBe('https://docs.hivecommons.dev/docs/hive/integrations')
-    expect(meta.robots).toEqual({ index: true, follow: true })
-  })
-
-  it('returns empty metadata for every other page', async () => {
+      params: Promise.resolve({ slug: ["hive", "integrations"] }),
+    });
+    expect(meta.title).toBe("Supported agents & inference engines");
+    expect(meta.alternates?.canonical).toBe("/docs/hive/integrations");
+    expect(meta.openGraph?.url).toBe(
+      "https://docs.hivecommons.dev/docs/hive/integrations"
+    );
+    expect(meta.robots).toEqual({ index: true, follow: true });
+  });
+
+  it("returns empty metadata for every other page", async () => {
     const meta = await generateMetadata({
-      params: Promise.resolve({ slug: ['hive', 'overview', 'introduction'] }),
-    })
-    expect(meta).toEqual({})
-  })
-})
-
-describe('DocPage fatal and special branches', () => {
-  it('calls notFound() when no content resolves for the slug', async () => {
+      params: Promise.resolve({ slug: ["hive", "overview", "introduction"] }),
+    });
+    expect(meta).toEqual({});
+  });
+});
+
+describe("DocPage fatal and special branches", () => {
+  it("calls notFound() when no content resolves for the slug", async () => {
     await expect(
-      DocPage({ params: Promise.resolve({ slug: ['no-such-project-page', 'nope'] }) })
-    ).rejects.toBe(NOT_FOUND)
-  })
+      DocPage({
+        params: Promise.resolve({ slug: ["no-such-project-page", "nope"] }),
+      })
+    ).rejects.toBe(NOT_FOUND);
+  });
 
   it(
-    'embeds the integrations JSON-LD script only on hive/integrations',
+    "embeds the integrations JSON-LD script only on hive/integrations",
     async () => {
-      const html = await renderDocsRoute(['hive', 'integrations'])
-      expect(html).toContain('application/ld+json')
-      expect(html).toContain('Supported agents &amp; inference engines')
+      const html = await renderDocsRoute(["hive", "integrations"]);
+      expect(html).toContain("application/ld+json");
+      expect(html).toContain("Supported agents &amp; inference engines");
 
-      const other = await renderDocsRoute(['hive', 'overview', 'introduction'])
-      expect(other).not.toContain('application/ld+json')
+      const other = await renderDocsRoute(["hive", "overview", "introduction"]);
+      expect(other).not.toContain("application/ld+json");
     },
     RENDER_TIMEOUT_MS
-  )
+  );
 
   it(
-    'falls back to plain-text <pre> rendering when MDX compilation throws',
+    "falls back to plain-text <pre> rendering when MDX compilation throws",
     async () => {
-      vi.resetModules()
-      vi.doMock('nextra/compile', () => ({
+      vi.resetModules();
+      vi.doMock("nextra/compile", () => ({
         compileMdx: () => {
-          throw new Error('boom: simulated MDX compile failure')
+          throw new Error("boom: simulated MDX compile failure");
         },
-      }))
+      }));
       try {
-        const fresh = await import('../app/docs/[...slug]/page')
+        const fresh = await import("../app/docs/[...slug]/page");
         // After resetModules the wrapper resolves a fresh DocsProvider module,
         // so the provider must come from the same module graph.
-        const { DocsProvider: FreshProvider } = await import('../components/docs/DocsProvider')
+        const { DocsProvider: FreshProvider } =
+          await import("../components/docs/DocsProvider");
         const page = await fresh.default({
-          params: Promise.resolve({ slug: ['hive', 'overview', 'introduction'] }),
-        })
-        const html = renderToStaticMarkup(createElement(FreshProvider, null, page))
-        expect(html).toContain('<pre>')
+          params: Promise.resolve({
+            slug: ["hive", "overview", "introduction"],
+          }),
+        });
+        const html = renderToStaticMarkup(
+          createElement(FreshProvider, null, page)
+        );
+        expect(html).toContain("<pre>");
         // Raw markdown shipped as text, not compiled to headings.
-        expect(html).not.toMatch(/<h1[ >]/)
+        expect(html).not.toMatch(/<h1[ >]/);
       } finally {
-        vi.doUnmock('nextra/compile')
-        vi.resetModules()
+        vi.doUnmock("nextra/compile");
+        vi.resetModules();
       }
     },
     RENDER_TIMEOUT_MS
-  )
-})
-
-describe('SlugLayout', () => {
-  it('detects the project from the slug and strips Meta nodes from the page map', async () => {
-    vi.resetModules()
-    const captured: Array<{ projectId: string; pageMap: unknown[] }> = []
-    vi.doMock('@/components/docs/SidebarContainer', () => ({
+  );
+});
+
+describe("SlugLayout", () => {
+  it("detects the project from the slug and strips Meta nodes from the page map", async () => {
+    vi.resetModules();
+    const captured: Array<{ projectId: string; pageMap: unknown[] }> = [];
+    vi.doMock("@/components/docs/SidebarContainer", () => ({
       SidebarContainer: (props: { projectId: string; pageMap: unknown[] }) => {
-        captured.push(props)
-        return null
+        captured.push(props);
+        return null;
       },
-    }))
+    }));
     try {
-      const { default: SlugLayout } = await import('../app/docs/[...slug]/layout')
+      const { default: SlugLayout } =
+        await import("../app/docs/[...slug]/layout");
 
       for (const [first, expected] of [
-        ['hotshot', 'hotshot'],
-        ['pluk', 'pluk'],
-        ['rationguard', 'rationguard'],
-        ['promptargs', 'promptargs'],
-        ['dibs', 'dibs'],
-        ['spektacular', 'spektacular'],
-        ['anything-else', 'hive'],
+        ["hotshot", "hotshot"],
+        ["pluk", "pluk"],
+        ["rationguard", "rationguard"],
+        ["promptargs", "promptargs"],
+        ["dibs", "dibs"],
+        ["spektacular", "spektacular"],
+        ["anything-else", "hive"],
       ] as const) {
         renderToStaticMarkup(
           await SlugLayout({
             children: null,
-            params: Promise.resolve({ slug: [first, 'page'] }),
+            params: Promise.resolve({ slug: [first, "page"] }),
           })
-        )
-        expect(captured.at(-1)?.projectId).toBe(expected)
+        );
+        expect(captured.at(-1)?.projectId).toBe(expected);
       }
 
       // The empty slug also falls back to hive.
       renderToStaticMarkup(
-        await SlugLayout({ children: null, params: Promise.resolve({ slug: [] }) })
-      )
-      expect(captured.at(-1)?.projectId).toBe('hive')
+        await SlugLayout({
+          children: null,
+          params: Promise.resolve({ slug: [] }),
+        })
+      );
+      expect(captured.at(-1)?.projectId).toBe("hive");
 
       // Meta nodes (raw and nextra-normalized) are stripped recursively.
-      type Node = { name?: string; route?: string; kind?: string; data?: unknown; children?: Node[] }
+      type Node = {
+        name?: string;
+        route?: string;
+        kind?: string;
+        data?: unknown;
+        children?: Node[];
+      };
       const hasMeta = (items: Node[]): boolean =>
         items.some(
-          (n) =>
-            n.kind === 'Meta' ||
-            ('data' in n && !n.name && !n.route) ||
+          n =>
+            n.kind === "Meta" ||
+            ("data" in n && !n.name && !n.route) ||
             (n.children ? hasMeta(n.children) : false)
-        )
-      const pageMap = captured.at(-1)?.pageMap as Node[]
-      expect(Array.isArray(pageMap)).toBe(true)
-      expect(pageMap.length).toBeGreaterThan(0)
-      expect(hasMeta(pageMap)).toBe(false)
+        );
+      const pageMap = captured.at(-1)?.pageMap as Node[];
+      expect(Array.isArray(pageMap)).toBe(true);
+      expect(pageMap.length).toBeGreaterThan(0);
+      expect(hasMeta(pageMap)).toBe(false);
     } finally {
-      vi.doUnmock('@/components/docs/SidebarContainer')
-      vi.resetModules()
+      vi.doUnmock("@/components/docs/SidebarContainer");
+      vi.resetModules();
     }
-  })
-})
+  });
+});
diff --git a/src/__tests__/fetchConfig.test.ts b/src/__tests__/fetchConfig.test.ts
index a230102..9dc1b9d 100644
--- a/src/__tests__/fetchConfig.test.ts
+++ b/src/__tests__/fetchConfig.test.ts
@@ -1,8 +1,8 @@
-import { describe, it, expect, beforeEach, afterEach, vi } from 'vitest'
-import type { SharedConfig } from '../hooks/useSharedConfig'
+import { describe, it, expect, beforeEach, afterEach, vi } from "vitest";
+import type { SharedConfig } from "../hooks/useSharedConfig";
 
-const LOCAL_URL = '/config/shared.json'
-const PROD_URL = 'https://docs.hivecommons.dev/config/shared.json'
+const LOCAL_URL = "/config/shared.json";
+const PROD_URL = "https://docs.hivecommons.dev/config/shared.json";
 
 function makeConfig(overrides: Partial<SharedConfig> = {}): SharedConfig {
   return {
@@ -10,9 +10,9 @@ function makeConfig(overrides: Partial<SharedConfig> = {}): SharedConfig {
     projects: {},
     relatedProjects: [],
     editBaseUrls: {},
-    updatedAt: '2026-07-01T00:00:00.000Z',
+    updatedAt: "2026-07-01T00:00:00.000Z",
     ...overrides,
-  }
+  };
 }
 
 function ok(body: unknown): Response {
@@ -20,7 +20,7 @@ function ok(body: unknown): Response {
     ok: true,
     status: 200,
     json: async () => body,
-  } as unknown as Response
+  } as unknown as Response;
 }
 
 function notOk(status = 404): Response {
@@ -28,227 +28,237 @@ function notOk(status = 404): Response {
     ok: false,
     status,
     json: async () => ({}),
-  } as unknown as Response
+  } as unknown as Response;
 }
 
 async function importFresh() {
-  vi.resetModules()
-  return await import('../hooks/useSharedConfig')
+  vi.resetModules();
+  return await import("../hooks/useSharedConfig");
 }
 
-let fetchMock: ReturnType<typeof vi.fn>
+let fetchMock: ReturnType<typeof vi.fn>;
 
 beforeEach(() => {
-  fetchMock = vi.fn()
-  vi.stubGlobal('fetch', fetchMock)
-  vi.spyOn(console, 'warn').mockImplementation(() => {})
-})
+  fetchMock = vi.fn();
+  vi.stubGlobal("fetch", fetchMock);
+  vi.spyOn(console, "warn").mockImplementation(() => {});
+});
 
 afterEach(() => {
-  vi.unstubAllGlobals()
-  vi.restoreAllMocks()
-  vi.useRealTimers()
-})
-
-describe('fetchConfig', () => {
-  it('returns null when both local and production fetches fail (network error)', async () => {
-    fetchMock.mockRejectedValue(new Error('boom'))
-    const { fetchConfig } = await importFresh()
-    const result = await fetchConfig()
-    expect(result).toBeNull()
-    expect(fetchMock).toHaveBeenCalledTimes(2)
-  })
-
-  it('returns null when both endpoints respond non-ok', async () => {
-    fetchMock.mockResolvedValue(notOk(500))
-    const { fetchConfig } = await importFresh()
-    const result = await fetchConfig()
-    expect(result).toBeNull()
-  })
-
-  it('requests the local and production URLs in parallel', async () => {
-    fetchMock.mockResolvedValue(notOk())
-    const { fetchConfig } = await importFresh()
-    await fetchConfig()
-    const urls = fetchMock.mock.calls.map(c => c[0])
-    expect(urls).toContain(LOCAL_URL)
-    expect(urls).toContain(PROD_URL)
-  })
-
-  it('passes cache:no-store and Accept header on the production request', async () => {
-    fetchMock.mockResolvedValue(notOk())
-    const { fetchConfig } = await importFresh()
-    await fetchConfig()
-    const prodCall = fetchMock.mock.calls.find(c => c[0] === PROD_URL)
-    expect(prodCall).toBeDefined()
-    const init = prodCall![1] as RequestInit
-    expect(init.cache).toBe('no-store')
-    expect((init.headers as Record<string, string>).Accept).toBe('application/json')
-  })
-
-  it('returns the local config when only local succeeds', async () => {
-    const local = makeConfig({ surveyUrl: 'https://local/survey' })
+  vi.unstubAllGlobals();
+  vi.restoreAllMocks();
+  vi.useRealTimers();
+});
+
+describe("fetchConfig", () => {
+  it("returns null when both local and production fetches fail (network error)", async () => {
+    fetchMock.mockRejectedValue(new Error("boom"));
+    const { fetchConfig } = await importFresh();
+    const result = await fetchConfig();
+    expect(result).toBeNull();
+    expect(fetchMock).toHaveBeenCalledTimes(2);
+  });
+
+  it("returns null when both endpoints respond non-ok", async () => {
+    fetchMock.mockResolvedValue(notOk(500));
+    const { fetchConfig } = await importFresh();
+    const result = await fetchConfig();
+    expect(result).toBeNull();
+  });
+
+  it("requests the local and production URLs in parallel", async () => {
+    fetchMock.mockResolvedValue(notOk());
+    const { fetchConfig } = await importFresh();
+    await fetchConfig();
+    const urls = fetchMock.mock.calls.map(c => c[0]);
+    expect(urls).toContain(LOCAL_URL);
+    expect(urls).toContain(PROD_URL);
+  });
+
+  it("passes cache:no-store and Accept header on the production request", async () => {
+    fetchMock.mockResolvedValue(notOk());
+    const { fetchConfig } = await importFresh();
+    await fetchConfig();
+    const prodCall = fetchMock.mock.calls.find(c => c[0] === PROD_URL);
+    expect(prodCall).toBeDefined();
+    const init = prodCall![1] as RequestInit;
+    expect(init.cache).toBe("no-store");
+    expect((init.headers as Record<string, string>).Accept).toBe(
+      "application/json"
+    );
+  });
+
+  it("returns the local config when only local succeeds", async () => {
+    const local = makeConfig({ surveyUrl: "https://local/survey" });
     fetchMock.mockImplementation(async (url: string) =>
       url === LOCAL_URL ? ok(local) : notOk()
-    )
-    const { fetchConfig } = await importFresh()
-    const result = await fetchConfig()
-    expect(result).toEqual(local)
-  })
-
-  it('returns the production config when only production succeeds', async () => {
-    const prod = makeConfig({ surveyUrl: 'https://prod/survey' })
+    );
+    const { fetchConfig } = await importFresh();
+    const result = await fetchConfig();
+    expect(result).toEqual(local);
+  });
+
+  it("returns the production config when only production succeeds", async () => {
+    const prod = makeConfig({ surveyUrl: "https://prod/survey" });
     fetchMock.mockImplementation(async (url: string) =>
       url === PROD_URL ? ok(prod) : notOk()
-    )
-    const { fetchConfig } = await importFresh()
-    const result = await fetchConfig()
-    expect(result).toEqual(prod)
-  })
+    );
+    const { fetchConfig } = await importFresh();
+    const result = await fetchConfig();
+    expect(result).toEqual(prod);
+  });
 
-  it('merges configs preferring the newer updatedAt as primary', async () => {
+  it("merges configs preferring the newer updatedAt as primary", async () => {
     // Local newer than production: local wins on conflicts.
     const local = makeConfig({
-      updatedAt: '2026-07-02T00:00:00.000Z',
-      surveyUrl: 'https://local/survey',
-      versions: { p1: { latest: { label: 'local', branch: 'l', isDefault: true } } },
-      editBaseUrls: { p1: 'https://local/edit' },
-      relatedProjects: [{ title: 'Local', href: '/l' }],
-    })
+      updatedAt: "2026-07-02T00:00:00.000Z",
+      surveyUrl: "https://local/survey",
+      versions: {
+        p1: { latest: { label: "local", branch: "l", isDefault: true } },
+      },
+      editBaseUrls: { p1: "https://local/edit" },
+      relatedProjects: [{ title: "Local", href: "/l" }],
+    });
     const prod = makeConfig({
-      updatedAt: '2026-07-01T00:00:00.000Z',
-      surveyUrl: 'https://prod/survey',
-      versions: { p1: { latest: { label: 'prod', branch: 'p', isDefault: false } } },
-      editBaseUrls: { p1: 'https://prod/edit', p2: 'https://prod/edit2' },
-      relatedProjects: [{ title: 'Prod', href: '/p' }],
-    })
+      updatedAt: "2026-07-01T00:00:00.000Z",
+      surveyUrl: "https://prod/survey",
+      versions: {
+        p1: { latest: { label: "prod", branch: "p", isDefault: false } },
+      },
+      editBaseUrls: { p1: "https://prod/edit", p2: "https://prod/edit2" },
+      relatedProjects: [{ title: "Prod", href: "/p" }],
+    });
     fetchMock.mockImplementation(async (url: string) =>
       url === LOCAL_URL ? ok(local) : ok(prod)
-    )
-    const { fetchConfig } = await importFresh()
-    const merged = await fetchConfig()
-    expect(merged).not.toBeNull()
+    );
+    const { fetchConfig } = await importFresh();
+    const merged = await fetchConfig();
+    expect(merged).not.toBeNull();
     // Local (primary) wins the surveyUrl, version conflict, and updatedAt.
-    expect(merged!.surveyUrl).toBe('https://local/survey')
-    expect(merged!.updatedAt).toBe('2026-07-02T00:00:00.000Z')
-    expect(merged!.versions.p1.latest.label).toBe('local')
+    expect(merged!.surveyUrl).toBe("https://local/survey");
+    expect(merged!.updatedAt).toBe("2026-07-02T00:00:00.000Z");
+    expect(merged!.versions.p1.latest.label).toBe("local");
     // Non-conflicting keys from production are preserved.
-    expect(merged!.editBaseUrls.p2).toBe('https://prod/edit2')
+    expect(merged!.editBaseUrls.p2).toBe("https://prod/edit2");
     // Primary's non-empty relatedProjects wins over secondary's.
-    expect(merged!.relatedProjects).toEqual([{ title: 'Local', href: '/l' }])
-  })
+    expect(merged!.relatedProjects).toEqual([{ title: "Local", href: "/l" }]);
+  });
 
-  it('promotes production to primary when it has the newer updatedAt', async () => {
+  it("promotes production to primary when it has the newer updatedAt", async () => {
     const local = makeConfig({
-      updatedAt: '2026-06-01T00:00:00.000Z',
-      surveyUrl: 'https://local/survey',
-    })
+      updatedAt: "2026-06-01T00:00:00.000Z",
+      surveyUrl: "https://local/survey",
+    });
     const prod = makeConfig({
-      updatedAt: '2026-07-01T00:00:00.000Z',
-      surveyUrl: 'https://prod/survey',
-    })
+      updatedAt: "2026-07-01T00:00:00.000Z",
+      surveyUrl: "https://prod/survey",
+    });
     fetchMock.mockImplementation(async (url: string) =>
       url === LOCAL_URL ? ok(local) : ok(prod)
-    )
-    const { fetchConfig } = await importFresh()
-    const merged = await fetchConfig()
-    expect(merged!.surveyUrl).toBe('https://prod/survey')
-    expect(merged!.updatedAt).toBe('2026-07-01T00:00:00.000Z')
-  })
-
-  it('falls back to secondary relatedProjects when primary has none', async () => {
+    );
+    const { fetchConfig } = await importFresh();
+    const merged = await fetchConfig();
+    expect(merged!.surveyUrl).toBe("https://prod/survey");
+    expect(merged!.updatedAt).toBe("2026-07-01T00:00:00.000Z");
+  });
+
+  it("falls back to secondary relatedProjects when primary has none", async () => {
     const local = makeConfig({
-      updatedAt: '2026-07-02T00:00:00.000Z',
+      updatedAt: "2026-07-02T00:00:00.000Z",
       relatedProjects: [],
-    })
+    });
     const prod = makeConfig({
-      updatedAt: '2026-07-01T00:00:00.000Z',
-      relatedProjects: [{ title: 'From prod', href: '/x' }],
-    })
+      updatedAt: "2026-07-01T00:00:00.000Z",
+      relatedProjects: [{ title: "From prod", href: "/x" }],
+    });
     fetchMock.mockImplementation(async (url: string) =>
       url === LOCAL_URL ? ok(local) : ok(prod)
-    )
-    const { fetchConfig } = await importFresh()
-    const merged = await fetchConfig()
-    expect(merged!.relatedProjects).toEqual([{ title: 'From prod', href: '/x' }])
-  })
-
-  it('returns the cached config on a second call within TTL without refetching', async () => {
-    const local = makeConfig({ surveyUrl: 'https://local/survey' })
+    );
+    const { fetchConfig } = await importFresh();
+    const merged = await fetchConfig();
+    expect(merged!.relatedProjects).toEqual([
+      { title: "From prod", href: "/x" },
+    ]);
+  });
+
+  it("returns the cached config on a second call within TTL without refetching", async () => {
+    const local = makeConfig({ surveyUrl: "https://local/survey" });
     fetchMock.mockImplementation(async (url: string) =>
       url === LOCAL_URL ? ok(local) : notOk()
-    )
-    const { fetchConfig } = await importFresh()
-    const first = await fetchConfig()
-    const callsAfterFirst = fetchMock.mock.calls.length
-    const second = await fetchConfig()
-    expect(second).toBe(first)
-    expect(fetchMock.mock.calls.length).toBe(callsAfterFirst)
-  })
-
-  it('refetches when forceRefresh is true even if cache is valid', async () => {
-    const local = makeConfig({ surveyUrl: 'https://local/survey' })
+    );
+    const { fetchConfig } = await importFresh();
+    const first = await fetchConfig();
+    const callsAfterFirst = fetchMock.mock.calls.length;
+    const second = await fetchConfig();
+    expect(second).toBe(first);
+    expect(fetchMock.mock.calls.length).toBe(callsAfterFirst);
+  });
+
+  it("refetches when forceRefresh is true even if cache is valid", async () => {
+    const local = makeConfig({ surveyUrl: "https://local/survey" });
     fetchMock.mockImplementation(async (url: string) =>
       url === LOCAL_URL ? ok(local) : notOk()
-    )
-    const { fetchConfig } = await importFresh()
-    await fetchConfig()
-    const beforeForce = fetchMock.mock.calls.length
-    await fetchConfig(true)
-    expect(fetchMock.mock.calls.length).toBeGreaterThan(beforeForce)
-  })
-
-  it('refetches after the cache TTL expires', async () => {
-    const local = makeConfig({ surveyUrl: 'https://local/survey' })
+    );
+    const { fetchConfig } = await importFresh();
+    await fetchConfig();
+    const beforeForce = fetchMock.mock.calls.length;
+    await fetchConfig(true);
+    expect(fetchMock.mock.calls.length).toBeGreaterThan(beforeForce);
+  });
+
+  it("refetches after the cache TTL expires", async () => {
+    const local = makeConfig({ surveyUrl: "https://local/survey" });
     fetchMock.mockImplementation(async (url: string) =>
       url === LOCAL_URL ? ok(local) : notOk()
-    )
-    vi.useFakeTimers()
-    vi.setSystemTime(new Date('2026-07-01T00:00:00.000Z'))
-    const { fetchConfig } = await importFresh()
-    await fetchConfig()
-    const beforeExpiry = fetchMock.mock.calls.length
+    );
+    vi.useFakeTimers();
+    vi.setSystemTime(new Date("2026-07-01T00:00:00.000Z"));
+    const { fetchConfig } = await importFresh();
+    await fetchConfig();
+    const beforeExpiry = fetchMock.mock.calls.length;
     // Advance beyond the 5-minute TTL.
-    vi.setSystemTime(new Date('2026-07-01T00:06:00.000Z'))
-    await fetchConfig()
-    expect(fetchMock.mock.calls.length).toBeGreaterThan(beforeExpiry)
-  })
+    vi.setSystemTime(new Date("2026-07-01T00:06:00.000Z"));
+    await fetchConfig();
+    expect(fetchMock.mock.calls.length).toBeGreaterThan(beforeExpiry);
+  });
 
-  it('deduplicates concurrent in-flight fetches', async () => {
-    let resolveLocal!: (r: Response) => void
+  it("deduplicates concurrent in-flight fetches", async () => {
+    let resolveLocal!: (r: Response) => void;
     const localPromise = new Promise<Response>(r => {
-      resolveLocal = r
-    })
+      resolveLocal = r;
+    });
     fetchMock.mockImplementation((url: string) =>
       url === LOCAL_URL ? localPromise : Promise.resolve(notOk())
-    )
-    const { fetchConfig } = await importFresh()
-    const p1 = fetchConfig()
-    const p2 = fetchConfig()
+    );
+    const { fetchConfig } = await importFresh();
+    const p1 = fetchConfig();
+    const p2 = fetchConfig();
     // Both callers should see the same in-flight promise resolution
-    resolveLocal(ok(makeConfig({ surveyUrl: 'https://l' })))
-    const [r1, r2] = await Promise.all([p1, p2])
-    expect(r1).toBe(r2)
+    resolveLocal(ok(makeConfig({ surveyUrl: "https://l" })));
+    const [r1, r2] = await Promise.all([p1, p2]);
+    expect(r1).toBe(r2);
     // Only one local-fetch call should have been issued despite two callers.
-    const localCalls = fetchMock.mock.calls.filter(c => c[0] === LOCAL_URL).length
-    expect(localCalls).toBe(1)
-  })
+    const localCalls = fetchMock.mock.calls.filter(
+      c => c[0] === LOCAL_URL
+    ).length;
+    expect(localCalls).toBe(1);
+  });
 
-  it('treats missing/invalid updatedAt as timestamp 0 when merging', async () => {
+  it("treats missing/invalid updatedAt as timestamp 0 when merging", async () => {
     const local = makeConfig({
-      updatedAt: 'not-a-date',
-      surveyUrl: 'https://local/survey',
-    })
+      updatedAt: "not-a-date",
+      surveyUrl: "https://local/survey",
+    });
     const prod = makeConfig({
-      updatedAt: '2026-07-01T00:00:00.000Z',
-      surveyUrl: 'https://prod/survey',
-    })
+      updatedAt: "2026-07-01T00:00:00.000Z",
+      surveyUrl: "https://prod/survey",
+    });
     fetchMock.mockImplementation(async (url: string) =>
       url === LOCAL_URL ? ok(local) : ok(prod)
-    )
-    const { fetchConfig } = await importFresh()
-    const merged = await fetchConfig()
+    );
+    const { fetchConfig } = await importFresh();
+    const merged = await fetchConfig();
     // Production has the larger real timestamp, so it becomes primary and wins.
-    expect(merged!.surveyUrl).toBe('https://prod/survey')
-  })
-})
+    expect(merged!.surveyUrl).toBe("https://prod/survey");
+  });
+});
diff --git a/src/__tests__/gtagEvent.test.ts b/src/__tests__/gtagEvent.test.ts
index c3a072c..a13e48a 100644
--- a/src/__tests__/gtagEvent.test.ts
+++ b/src/__tests__/gtagEvent.test.ts
@@ -18,94 +18,94 @@
  * The happy path — window.gtag exists — should forward the call verbatim
  * as gtag("event", eventName, params).
  */
-import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
 
-import { gtagEvent } from '../components/GoogleAnalytics'
+import { gtagEvent } from "../components/GoogleAnalytics";
 
-const originalWindow = globalThis.window
+const originalWindow = globalThis.window;
 
 function installWindow(gtag: unknown) {
-  Object.defineProperty(globalThis, 'window', {
+  Object.defineProperty(globalThis, "window", {
     value: gtag === undefined ? {} : { gtag },
     writable: true,
     configurable: true,
-  })
+  });
 }
 
 function restoreWindow() {
   if (originalWindow === undefined) {
     // @ts-expect-error - removing window for SSR tests
-    delete globalThis.window
+    delete globalThis.window;
   } else {
-    Object.defineProperty(globalThis, 'window', {
+    Object.defineProperty(globalThis, "window", {
       value: originalWindow,
       writable: true,
       configurable: true,
-    })
+    });
   }
 }
 
-describe('gtagEvent', () => {
+describe("gtagEvent", () => {
   beforeEach(() => {
-    restoreWindow()
-  })
+    restoreWindow();
+  });
 
   afterEach(() => {
-    restoreWindow()
-    vi.restoreAllMocks()
-  })
+    restoreWindow();
+    vi.restoreAllMocks();
+  });
 
-  it('is a no-op on the server (window undefined) and does not throw', () => {
+  it("is a no-op on the server (window undefined) and does not throw", () => {
     // @ts-expect-error - removing window for SSR path
-    delete globalThis.window
-    expect(() => gtagEvent('survey_click')).not.toThrow()
-    expect(() => gtagEvent('survey_click', { source: 'navbar' })).not.toThrow()
-  })
+    delete globalThis.window;
+    expect(() => gtagEvent("survey_click")).not.toThrow();
+    expect(() => gtagEvent("survey_click", { source: "navbar" })).not.toThrow();
+  });
 
-  it('is a no-op when window exists but window.gtag has not loaded yet', () => {
-    installWindow(undefined)
-    expect(() => gtagEvent('doc_feedback', { rating: 5 })).not.toThrow()
-  })
+  it("is a no-op when window exists but window.gtag has not loaded yet", () => {
+    installWindow(undefined);
+    expect(() => gtagEvent("doc_feedback", { rating: 5 })).not.toThrow();
+  });
 
-  it('forwards eventName and params to window.gtag when available', () => {
-    const spy = vi.fn()
-    installWindow(spy)
+  it("forwards eventName and params to window.gtag when available", () => {
+    const spy = vi.fn();
+    installWindow(spy);
 
-    gtagEvent('survey_click', { source: 'navbar', variant: 'A' })
+    gtagEvent("survey_click", { source: "navbar", variant: "A" });
 
-    expect(spy).toHaveBeenCalledTimes(1)
-    expect(spy).toHaveBeenCalledWith('event', 'survey_click', {
-      source: 'navbar',
-      variant: 'A',
-    })
-  })
+    expect(spy).toHaveBeenCalledTimes(1);
+    expect(spy).toHaveBeenCalledWith("event", "survey_click", {
+      source: "navbar",
+      variant: "A",
+    });
+  });
 
-  it('forwards undefined params without adding a synthetic third argument', () => {
-    const spy = vi.fn()
-    installWindow(spy)
+  it("forwards undefined params without adding a synthetic third argument", () => {
+    const spy = vi.fn();
+    installWindow(spy);
 
-    gtagEvent('page_view_manual')
+    gtagEvent("page_view_manual");
 
-    expect(spy).toHaveBeenCalledTimes(1)
+    expect(spy).toHaveBeenCalledTimes(1);
     // Third arg is passed through as-is (undefined), matching gtag.js's
     // own signature: gtag('event', name, params?)
-    expect(spy).toHaveBeenCalledWith('event', 'page_view_manual', undefined)
-  })
+    expect(spy).toHaveBeenCalledWith("event", "page_view_manual", undefined);
+  });
 
-  it('supports the full param value type union (string | number | boolean)', () => {
-    const spy = vi.fn()
-    installWindow(spy)
+  it("supports the full param value type union (string | number | boolean)", () => {
+    const spy = vi.fn();
+    installWindow(spy);
 
-    gtagEvent('mixed_params', {
-      label: 'signup',
+    gtagEvent("mixed_params", {
+      label: "signup",
       value: 42,
       logged_in: true,
-    })
+    });
 
-    expect(spy).toHaveBeenCalledWith('event', 'mixed_params', {
-      label: 'signup',
+    expect(spy).toHaveBeenCalledWith("event", "mixed_params", {
+      label: "signup",
       value: 42,
       logged_in: true,
-    })
-  })
-})
+    });
+  });
+});
diff --git a/src/__tests__/healthz-route.test.ts b/src/__tests__/healthz-route.test.ts
index 8a4bb93..a3ca82f 100644
--- a/src/__tests__/healthz-route.test.ts
+++ b/src/__tests__/healthz-route.test.ts
@@ -1,146 +1,157 @@
-import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
-import fs from 'fs'
-import { docsContentPath } from '@/app/docs/page-map'
-import { GET } from '@/app/api/healthz/route'
-import { logger } from '@/lib/logger'
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+import fs from "fs";
+import { docsContentPath } from "@/app/docs/page-map";
+import { GET } from "@/app/api/healthz/route";
+import { logger } from "@/lib/logger";
 
 /**
  * Coverage for src/app/api/healthz/route.ts — the readiness probe that
  * verifies the docs content tree is present and readable before the
  * orchestrator routes traffic to this instance. Previously at 0%.
  */
-describe('/api/healthz route', () => {
-  let statSyncSpy: ReturnType<typeof vi.spyOn>
-  let readdirSyncSpy: ReturnType<typeof vi.spyOn>
-  let loggerErrorSpy: ReturnType<typeof vi.spyOn>
+describe("/api/healthz route", () => {
+  let statSyncSpy: ReturnType<typeof vi.spyOn>;
+  let readdirSyncSpy: ReturnType<typeof vi.spyOn>;
+  let loggerErrorSpy: ReturnType<typeof vi.spyOn>;
 
   beforeEach(() => {
-    statSyncSpy = vi.spyOn(fs, 'statSync')
-    readdirSyncSpy = vi.spyOn(fs, 'readdirSync')
-    loggerErrorSpy = vi.spyOn(logger, 'error').mockImplementation(() => {})
-  })
+    statSyncSpy = vi.spyOn(fs, "statSync");
+    readdirSyncSpy = vi.spyOn(fs, "readdirSync");
+    loggerErrorSpy = vi.spyOn(logger, "error").mockImplementation(() => {});
+  });
 
   afterEach(() => {
-    vi.restoreAllMocks()
-  })
+    vi.restoreAllMocks();
+  });
 
   it('returns 200 { status: "ok" } when the docs content directory exists and is non-empty', async () => {
-    statSyncSpy.mockReturnValueOnce({ isDirectory: () => true } as unknown as fs.Stats)
-    readdirSyncSpy.mockReturnValueOnce(['intro.md', 'kubestellar'] as unknown as fs.Dirent[])
-
-    const res = await GET()
-
-    expect(res.status).toBe(200)
-    expect(statSyncSpy).toHaveBeenCalledWith(docsContentPath)
-    expect(readdirSyncSpy).toHaveBeenCalledWith(docsContentPath)
-    const body = await res.json()
-    expect(body).toEqual({ status: 'ok' })
-    expect(loggerErrorSpy).not.toHaveBeenCalled()
-  })
+    statSyncSpy.mockReturnValueOnce({
+      isDirectory: () => true,
+    } as unknown as fs.Stats);
+    readdirSyncSpy.mockReturnValueOnce([
+      "intro.md",
+      "kubestellar",
+    ] as unknown as fs.Dirent[]);
+
+    const res = await GET();
+
+    expect(res.status).toBe(200);
+    expect(statSyncSpy).toHaveBeenCalledWith(docsContentPath);
+    expect(readdirSyncSpy).toHaveBeenCalledWith(docsContentPath);
+    const body = await res.json();
+    expect(body).toEqual({ status: "ok" });
+    expect(loggerErrorSpy).not.toHaveBeenCalled();
+  });
 
   it('returns 503 with a "not a directory" reason when the content path is a file, not a directory', async () => {
-    statSyncSpy.mockReturnValueOnce({ isDirectory: () => false } as unknown as fs.Stats)
+    statSyncSpy.mockReturnValueOnce({
+      isDirectory: () => false,
+    } as unknown as fs.Stats);
 
-    const res = await GET()
+    const res = await GET();
 
-    expect(res.status).toBe(503)
-    expect(readdirSyncSpy).not.toHaveBeenCalled()
-    const body = await res.json()
+    expect(res.status).toBe(503);
+    expect(readdirSyncSpy).not.toHaveBeenCalled();
+    const body = await res.json();
     expect(body).toEqual({
-      status: 'unhealthy',
-      reason: 'docs content path is not a directory',
-    })
-    expect(loggerErrorSpy).toHaveBeenCalledWith('healthz check failed', {
-      route: 'healthz',
-      method: 'GET',
+      status: "unhealthy",
+      reason: "docs content path is not a directory",
+    });
+    expect(loggerErrorSpy).toHaveBeenCalledWith("healthz check failed", {
+      route: "healthz",
+      method: "GET",
       status: 503,
-      error: 'docs content path is not a directory',
-    })
-  })
+      error: "docs content path is not a directory",
+    });
+  });
 
   it('returns 503 with an "empty" reason when the content directory has no entries', async () => {
-    statSyncSpy.mockReturnValueOnce({ isDirectory: () => true } as unknown as fs.Stats)
-    readdirSyncSpy.mockReturnValueOnce([] as unknown as fs.Dirent[])
+    statSyncSpy.mockReturnValueOnce({
+      isDirectory: () => true,
+    } as unknown as fs.Stats);
+    readdirSyncSpy.mockReturnValueOnce([] as unknown as fs.Dirent[]);
 
-    const res = await GET()
+    const res = await GET();
 
-    expect(res.status).toBe(503)
-    const body = await res.json()
+    expect(res.status).toBe(503);
+    const body = await res.json();
     expect(body).toEqual({
-      status: 'unhealthy',
-      reason: 'docs content path is empty',
-    })
-    expect(loggerErrorSpy).toHaveBeenCalledWith('healthz check failed', {
-      route: 'healthz',
-      method: 'GET',
+      status: "unhealthy",
+      reason: "docs content path is empty",
+    });
+    expect(loggerErrorSpy).toHaveBeenCalledWith("healthz check failed", {
+      route: "healthz",
+      method: "GET",
       status: 503,
-      error: 'docs content path is empty',
-    })
-  })
+      error: "docs content path is empty",
+    });
+  });
 
-  it('returns 503 propagating the Error.message when statSync throws (missing directory)', async () => {
+  it("returns 503 propagating the Error.message when statSync throws (missing directory)", async () => {
     statSyncSpy.mockImplementationOnce(() => {
-      throw new Error('ENOENT: no such file or directory')
-    })
+      throw new Error("ENOENT: no such file or directory");
+    });
 
-    const res = await GET()
+    const res = await GET();
 
-    expect(res.status).toBe(503)
-    expect(readdirSyncSpy).not.toHaveBeenCalled()
-    const body = await res.json()
+    expect(res.status).toBe(503);
+    expect(readdirSyncSpy).not.toHaveBeenCalled();
+    const body = await res.json();
     expect(body).toEqual({
-      status: 'unhealthy',
-      reason: 'ENOENT: no such file or directory',
-    })
-    expect(loggerErrorSpy).toHaveBeenCalledWith('healthz check failed', {
-      route: 'healthz',
-      method: 'GET',
+      status: "unhealthy",
+      reason: "ENOENT: no such file or directory",
+    });
+    expect(loggerErrorSpy).toHaveBeenCalledWith("healthz check failed", {
+      route: "healthz",
+      method: "GET",
       status: 503,
-      error: 'ENOENT: no such file or directory',
-    })
-  })
+      error: "ENOENT: no such file or directory",
+    });
+  });
 
-  it('returns 503 with the generic fallback reason when the thrown value is not an Error', async () => {
+  it("returns 503 with the generic fallback reason when the thrown value is not an Error", async () => {
     // Exercises the `err instanceof Error ? err.message : 'docs content path is unreadable'` false arm.
     statSyncSpy.mockImplementationOnce(() => {
-      throw 'string thrown from native fs'
-    })
+      throw "string thrown from native fs";
+    });
 
-    const res = await GET()
+    const res = await GET();
 
-    expect(res.status).toBe(503)
-    const body = await res.json()
+    expect(res.status).toBe(503);
+    const body = await res.json();
     expect(body).toEqual({
-      status: 'unhealthy',
-      reason: 'docs content path is unreadable',
-    })
-    expect(loggerErrorSpy).toHaveBeenCalledWith('healthz check failed', {
-      route: 'healthz',
-      method: 'GET',
+      status: "unhealthy",
+      reason: "docs content path is unreadable",
+    });
+    expect(loggerErrorSpy).toHaveBeenCalledWith("healthz check failed", {
+      route: "healthz",
+      method: "GET",
       status: 503,
-      error: 'docs content path is unreadable',
-    })
-  })
-
-  it('returns 503 when readdirSync throws after statSync succeeds (permission error)', async () => {
-    statSyncSpy.mockReturnValueOnce({ isDirectory: () => true } as unknown as fs.Stats)
+      error: "docs content path is unreadable",
+    });
+  });
+
+  it("returns 503 when readdirSync throws after statSync succeeds (permission error)", async () => {
+    statSyncSpy.mockReturnValueOnce({
+      isDirectory: () => true,
+    } as unknown as fs.Stats);
     readdirSyncSpy.mockImplementationOnce(() => {
-      throw new Error('EACCES: permission denied')
-    })
+      throw new Error("EACCES: permission denied");
+    });
 
-    const res = await GET()
+    const res = await GET();
 
-    expect(res.status).toBe(503)
-    const body = await res.json()
+    expect(res.status).toBe(503);
+    const body = await res.json();
     expect(body).toEqual({
-      status: 'unhealthy',
-      reason: 'EACCES: permission denied',
-    })
-    expect(loggerErrorSpy).toHaveBeenCalledWith('healthz check failed', {
-      route: 'healthz',
-      method: 'GET',
+      status: "unhealthy",
+      reason: "EACCES: permission denied",
+    });
+    expect(loggerErrorSpy).toHaveBeenCalledWith("healthz check failed", {
+      route: "healthz",
+      method: "GET",
       status: 503,
-      error: 'EACCES: permission denied',
-    })
-  })
-})
+      error: "EACCES: permission denied",
+    });
+  });
+});
diff --git a/src/__tests__/i18n-settings.test.ts b/src/__tests__/i18n-settings.test.ts
index 53bf7aa..0b041df 100644
--- a/src/__tests__/i18n-settings.test.ts
+++ b/src/__tests__/i18n-settings.test.ts
@@ -1,57 +1,57 @@
-import { describe, it, expect } from 'vitest'
-import { locales, defaultLocale, localeNames } from '../i18n/settings'
+import { describe, it, expect } from "vitest";
+import { locales, defaultLocale, localeNames } from "../i18n/settings";
 
 // ---------------------------------------------------------------------------
 // locales
 // ---------------------------------------------------------------------------
 
-describe('locales', () => {
-  it('is a non-empty array', () => {
-    expect(Array.isArray(locales)).toBe(true)
-    expect(locales.length).toBeGreaterThan(0)
-  })
+describe("locales", () => {
+  it("is a non-empty array", () => {
+    expect(Array.isArray(locales)).toBe(true);
+    expect(locales.length).toBeGreaterThan(0);
+  });
 
-  it('contains only unique values', () => {
-    expect(new Set(locales).size).toBe(locales.length)
-  })
-})
+  it("contains only unique values", () => {
+    expect(new Set(locales).size).toBe(locales.length);
+  });
+});
 
 // ---------------------------------------------------------------------------
 // defaultLocale
 // ---------------------------------------------------------------------------
 
-describe('defaultLocale', () => {
-  it('is a member of locales', () => {
-    expect(locales).toContain(defaultLocale)
-  })
-})
+describe("defaultLocale", () => {
+  it("is a member of locales", () => {
+    expect(locales).toContain(defaultLocale);
+  });
+});
 
 // ---------------------------------------------------------------------------
 // localeNames
 // ---------------------------------------------------------------------------
 
-describe('localeNames', () => {
-  it('covers every declared locale', () => {
+describe("localeNames", () => {
+  it("covers every declared locale", () => {
     for (const locale of locales) {
-      expect(localeNames[locale]).toBeTruthy()
+      expect(localeNames[locale]).toBeTruthy();
     }
-  })
+  });
 
-  it('has no extra or typo keys beyond declared locales', () => {
-    const localeSet = new Set<string>(locales)
+  it("has no extra or typo keys beyond declared locales", () => {
+    const localeSet = new Set<string>(locales);
     for (const key of Object.keys(localeNames)) {
-      expect(localeSet.has(key)).toBe(true)
+      expect(localeSet.has(key)).toBe(true);
     }
-  })
+  });
 
-  it('has the same number of entries as locales', () => {
-    expect(Object.keys(localeNames).length).toBe(locales.length)
-  })
+  it("has the same number of entries as locales", () => {
+    expect(Object.keys(localeNames).length).toBe(locales.length);
+  });
 
-  it('maps every locale to a non-empty string', () => {
+  it("maps every locale to a non-empty string", () => {
     for (const name of Object.values(localeNames)) {
-      expect(typeof name).toBe('string')
-      expect(name.length).toBeGreaterThan(0)
+      expect(typeof name).toBe("string");
+      expect(name.length).toBeGreaterThan(0);
     }
-  })
-})
+  });
+});
diff --git a/src/__tests__/logger.test.ts b/src/__tests__/logger.test.ts
index d74c044..2559ce5 100644
--- a/src/__tests__/logger.test.ts
+++ b/src/__tests__/logger.test.ts
@@ -1,22 +1,22 @@
-import { describe, it, expect, vi, beforeEach, afterEach } from "vitest"
-import { logger } from "@/lib/logger"
+import { describe, it, expect, vi, beforeEach, afterEach } from "vitest";
+import { logger } from "@/lib/logger";
 
 describe("logger", () => {
-  let logSpy: ReturnType<typeof vi.spyOn>
-  let warnSpy: ReturnType<typeof vi.spyOn>
-  let errorSpy: ReturnType<typeof vi.spyOn>
+  let logSpy: ReturnType<typeof vi.spyOn>;
+  let warnSpy: ReturnType<typeof vi.spyOn>;
+  let errorSpy: ReturnType<typeof vi.spyOn>;
 
   beforeEach(() => {
-    logSpy = vi.spyOn(console, "log").mockImplementation(() => {})
-    warnSpy = vi.spyOn(console, "warn").mockImplementation(() => {})
-    errorSpy = vi.spyOn(console, "error").mockImplementation(() => {})
-  })
+    logSpy = vi.spyOn(console, "log").mockImplementation(() => {});
+    warnSpy = vi.spyOn(console, "warn").mockImplementation(() => {});
+    errorSpy = vi.spyOn(console, "error").mockImplementation(() => {});
+  });
 
   afterEach(() => {
-    logSpy.mockRestore()
-    warnSpy.mockRestore()
-    errorSpy.mockRestore()
-  })
+    logSpy.mockRestore();
+    warnSpy.mockRestore();
+    errorSpy.mockRestore();
+  });
 
   it("emits a single-line JSON record with the expected bounded fields", () => {
     logger.info("request handled", {
@@ -24,13 +24,13 @@ describe("logger", () => {
       method: "GET",
       status: 200,
       durationMs: 4,
-    })
+    });
 
     // info-level records go through console.warn (repo lint only allows
     // console.warn/console.error), not console.log.
-    expect(logSpy).not.toHaveBeenCalled()
-    expect(warnSpy).toHaveBeenCalledTimes(1)
-    const parsed = JSON.parse(warnSpy.mock.calls[0][0] as string)
+    expect(logSpy).not.toHaveBeenCalled();
+    expect(warnSpy).toHaveBeenCalledTimes(1);
+    const parsed = JSON.parse(warnSpy.mock.calls[0][0] as string);
     expect(parsed).toMatchObject({
       level: "info",
       message: "request handled",
@@ -38,22 +38,22 @@ describe("logger", () => {
       method: "GET",
       status: 200,
       durationMs: 4,
-    })
-    expect(typeof parsed.time).toBe("string")
-  })
+    });
+    expect(typeof parsed.time).toBe("string");
+  });
   it("logs errors via console.error and truncates long error messages", () => {
-    const longError = "x".repeat(1000)
+    const longError = "x".repeat(1000);
     logger.error("search request failed", {
       route: "search",
       method: "GET",
       status: 500,
       error: longError,
-    })
+    });
 
-    expect(errorSpy).toHaveBeenCalledTimes(1)
-    const parsed = JSON.parse(errorSpy.mock.calls[0][0] as string)
-    expect(parsed.level).toBe("error")
-    expect(parsed.error.length).toBeLessThan(320)
-    expect(parsed.error.endsWith("...")).toBe(true)
-  })
-})
+    expect(errorSpy).toHaveBeenCalledTimes(1);
+    const parsed = JSON.parse(errorSpy.mock.calls[0][0] as string);
+    expect(parsed.level).toBe("error");
+    expect(parsed.error.length).toBeLessThan(320);
+    expect(parsed.error.endsWith("...")).toBe(true);
+  });
+});
diff --git a/src/__tests__/metrics-3xx-branch.test.ts b/src/__tests__/metrics-3xx-branch.test.ts
index 5733a4e..34762a0 100644
--- a/src/__tests__/metrics-3xx-branch.test.ts
+++ b/src/__tests__/metrics-3xx-branch.test.ts
@@ -1,5 +1,5 @@
-import { describe, it, expect, beforeEach } from "vitest"
-import { metricsRegistry, recordApiRequest } from "@/lib/metrics"
+import { describe, it, expect, beforeEach } from "vitest";
+import { metricsRegistry, recordApiRequest } from "@/lib/metrics";
 
 /**
  * Locks in the 3xx branch of statusClass() in src/lib/metrics.ts (line 40).
@@ -14,31 +14,31 @@ import { metricsRegistry, recordApiRequest } from "@/lib/metrics"
  */
 describe("metrics — 3xx branch of statusClass", () => {
   beforeEach(() => {
-    metricsRegistry.resetMetrics()
-  })
+    metricsRegistry.resetMetrics();
+  });
 
   it('classifies 301, 302, 304 (redirects / not-modified) as "3xx"', async () => {
-    recordApiRequest("search", "GET", 301, 1)
-    recordApiRequest("search", "GET", 302, 1)
-    recordApiRequest("docs-image", "GET", 304, 1)
+    recordApiRequest("search", "GET", 301, 1);
+    recordApiRequest("search", "GET", 302, 1);
+    recordApiRequest("docs-image", "GET", 304, 1);
 
-    const text = await metricsRegistry.metrics()
+    const text = await metricsRegistry.metrics();
 
-    expect(text).toContain('status_class="3xx"')
+    expect(text).toContain('status_class="3xx"');
     // Regression guard: raw 3xx codes must not leak into label values.
-    expect(text).not.toMatch(/status_class="301"/)
-    expect(text).not.toMatch(/status_class="302"/)
-    expect(text).not.toMatch(/status_class="304"/)
-  })
+    expect(text).not.toMatch(/status_class="301"/);
+    expect(text).not.toMatch(/status_class="302"/);
+    expect(text).not.toMatch(/status_class="304"/);
+  });
 
   it('classifies boundary values 300 and 399 correctly (300 -> "3xx", 400 -> "4xx")', async () => {
-    recordApiRequest("search", "GET", 300, 1)
-    recordApiRequest("search", "GET", 399, 1)
-    recordApiRequest("search", "GET", 400, 1)
+    recordApiRequest("search", "GET", 300, 1);
+    recordApiRequest("search", "GET", 399, 1);
+    recordApiRequest("search", "GET", 400, 1);
 
-    const text = await metricsRegistry.metrics()
+    const text = await metricsRegistry.metrics();
 
-    expect(text).toContain('status_class="3xx"')
-    expect(text).toContain('status_class="4xx"')
-  })
-})
+    expect(text).toContain('status_class="3xx"');
+    expect(text).toContain('status_class="4xx"');
+  });
+});
diff --git a/src/__tests__/metrics-edge-branches.test.ts b/src/__tests__/metrics-edge-branches.test.ts
index 63312f6..f477d39 100644
--- a/src/__tests__/metrics-edge-branches.test.ts
+++ b/src/__tests__/metrics-edge-branches.test.ts
@@ -1,5 +1,5 @@
-import { describe, it, expect, beforeEach } from "vitest"
-import { metricsRegistry, recordApiRequest } from "@/lib/metrics"
+import { describe, it, expect, beforeEach } from "vitest";
+import { metricsRegistry, recordApiRequest } from "@/lib/metrics";
 
 /**
  * Extends the existing metrics.test.ts by covering the two edge branches
@@ -23,62 +23,60 @@ import { metricsRegistry, recordApiRequest } from "@/lib/metrics"
  */
 describe("metrics — out-of-range status + negative-duration clamps", () => {
   beforeEach(() => {
-    metricsRegistry.resetMetrics()
-  })
+    metricsRegistry.resetMetrics();
+  });
 
   it('classifies status < 200 as "other" (bounded-cardinality fallback)', async () => {
-    recordApiRequest("search", "GET", 100, 5)
-    recordApiRequest("search", "GET", 0, 5)
+    recordApiRequest("search", "GET", 100, 5);
+    recordApiRequest("search", "GET", 0, 5);
 
-    const text = await metricsRegistry.metrics()
+    const text = await metricsRegistry.metrics();
 
-    expect(text).toContain('status_class="other"')
+    expect(text).toContain('status_class="other"');
     // Regression guard: raw status codes must NEVER surface as label
     // values. If a refactor started stringifying `status` directly,
     // this would fail.
-    expect(text).not.toMatch(/status_class="100"/)
-    expect(text).not.toMatch(/status_class="0"/)
-  })
+    expect(text).not.toMatch(/status_class="100"/);
+    expect(text).not.toMatch(/status_class="0"/);
+  });
 
   it('classifies status >= 600 as "other"', async () => {
-    recordApiRequest("docs-image", "GET", 600, 5)
-    recordApiRequest("docs-image", "GET", 999, 5)
+    recordApiRequest("docs-image", "GET", 600, 5);
+    recordApiRequest("docs-image", "GET", 999, 5);
 
-    const text = await metricsRegistry.metrics()
-    expect(text).toContain('status_class="other"')
-    expect(text).not.toMatch(/status_class="600"/)
-    expect(text).not.toMatch(/status_class="999"/)
-  })
+    const text = await metricsRegistry.metrics();
+    expect(text).toContain('status_class="other"');
+    expect(text).not.toMatch(/status_class="600"/);
+    expect(text).not.toMatch(/status_class="999"/);
+  });
 
   it("clamps negative durationMs to 0 without throwing (prom-client would reject negatives)", async () => {
-    expect(() =>
-      recordApiRequest("search", "GET", 200, -50)
-    ).not.toThrow()
+    expect(() => recordApiRequest("search", "GET", 200, -50)).not.toThrow();
 
-    const text = await metricsRegistry.metrics()
+    const text = await metricsRegistry.metrics();
     // The observation must land in the smallest bucket (le=0.01) and
     // in +Inf, both with count >= 1 for a 0-second observation.
     expect(text).toMatch(
-      /docs_api_request_duration_seconds_bucket\{[^}]*le="0\.01"[^}]*\} 1/,
-    )
+      /docs_api_request_duration_seconds_bucket\{[^}]*le="0\.01"[^}]*\} 1/
+    );
     // Sum must equal exactly 0 for a single clamped observation.
     expect(text).toMatch(
-      /docs_api_request_duration_seconds_sum\{[^}]*route="search"[^}]*\} 0\b/,
-    )
-  })
+      /docs_api_request_duration_seconds_sum\{[^}]*route="search"[^}]*\} 0\b/
+    );
+  });
 
   it("normalizes standard method labels and buckets custom methods as OTHER", async () => {
-    recordApiRequest("search", "POST", 201, 8)
-    recordApiRequest("search", "CUSTOM-ONE", 201, 8)
-    recordApiRequest("search", "CUSTOM-TWO", 201, 8)
-    recordApiRequest("search", "get", 200, 8)
+    recordApiRequest("search", "POST", 201, 8);
+    recordApiRequest("search", "CUSTOM-ONE", 201, 8);
+    recordApiRequest("search", "CUSTOM-TWO", 201, 8);
+    recordApiRequest("search", "get", 200, 8);
 
-    const text = await metricsRegistry.metrics()
-    expect(text).toContain('method="POST"')
-    expect(text).toContain('method="GET"')
-    expect(text).toContain('method="OTHER"')
-    expect(text).not.toContain('method="CUSTOM-ONE"')
-    expect(text).not.toContain('method="CUSTOM-TWO"')
-    expect(text).toContain('status_class="2xx"')
-  })
-})
+    const text = await metricsRegistry.metrics();
+    expect(text).toContain('method="POST"');
+    expect(text).toContain('method="GET"');
+    expect(text).toContain('method="OTHER"');
+    expect(text).not.toContain('method="CUSTOM-ONE"');
+    expect(text).not.toContain('method="CUSTOM-TWO"');
+    expect(text).toContain('status_class="2xx"');
+  });
+});
diff --git a/src/__tests__/metrics-route.test.ts b/src/__tests__/metrics-route.test.ts
index 5afadae..07ce266 100644
--- a/src/__tests__/metrics-route.test.ts
+++ b/src/__tests__/metrics-route.test.ts
@@ -1,20 +1,20 @@
-import { describe, it, expect, beforeEach } from "vitest"
-import { GET } from "@/app/api/metrics/route"
-import { metricsRegistry, recordApiRequest } from "@/lib/metrics"
+import { describe, it, expect, beforeEach } from "vitest";
+import { GET } from "@/app/api/metrics/route";
+import { metricsRegistry, recordApiRequest } from "@/lib/metrics";
 
 describe("/api/metrics route", () => {
   beforeEach(() => {
-    metricsRegistry.resetMetrics()
-  })
+    metricsRegistry.resetMetrics();
+  });
 
   it("serves the Prometheus registry snapshot with the correct content type", async () => {
-    recordApiRequest("search", "GET", 200, 5)
+    recordApiRequest("search", "GET", 200, 5);
 
-    const response = await GET()
+    const response = await GET();
 
-    expect(response.status).toBe(200)
-    expect(response.headers.get("Content-Type")).toContain("text/plain")
-    const body = await response.text()
-    expect(body).toContain("docs_api_requests_total")
-  })
-})
+    expect(response.status).toBe(200);
+    expect(response.headers.get("Content-Type")).toContain("text/plain");
+    const body = await response.text();
+    expect(body).toContain("docs_api_requests_total");
+  });
+});
diff --git a/src/__tests__/metrics.test.ts b/src/__tests__/metrics.test.ts
index a2558ec..4b05c35 100644
--- a/src/__tests__/metrics.test.ts
+++ b/src/__tests__/metrics.test.ts
@@ -1,34 +1,34 @@
-import { describe, it, expect, beforeEach } from "vitest"
-import { metricsRegistry, recordApiRequest } from "@/lib/metrics"
+import { describe, it, expect, beforeEach } from "vitest";
+import { metricsRegistry, recordApiRequest } from "@/lib/metrics";
 
 describe("metrics", () => {
   beforeEach(() => {
-    metricsRegistry.resetMetrics()
-  })
+    metricsRegistry.resetMetrics();
+  });
 
   it("exposes request counters and duration histogram in Prometheus text format", async () => {
-    recordApiRequest("search", "GET", 200, 12.5)
-    recordApiRequest("docs-image", "GET", 404, 3)
+    recordApiRequest("search", "GET", 200, 12.5);
+    recordApiRequest("docs-image", "GET", 404, 3);
 
-    const text = await metricsRegistry.metrics()
+    const text = await metricsRegistry.metrics();
 
-    expect(text).toContain("docs_api_requests_total")
-    expect(text).toContain('route="search"')
-    expect(text).toContain('status_class="2xx"')
-    expect(text).toContain('route="docs-image"')
-    expect(text).toContain('status_class="4xx"')
-    expect(text).toContain("docs_api_request_duration_seconds")
-  })
+    expect(text).toContain("docs_api_requests_total");
+    expect(text).toContain('route="search"');
+    expect(text).toContain('status_class="2xx"');
+    expect(text).toContain('route="docs-image"');
+    expect(text).toContain('status_class="4xx"');
+    expect(text).toContain("docs_api_request_duration_seconds");
+  });
 
   it("keeps label cardinality bounded to known routes and status classes", async () => {
-    recordApiRequest("search", "GET", 500, 1)
-    const text = await metricsRegistry.metrics()
+    recordApiRequest("search", "GET", 500, 1);
+    const text = await metricsRegistry.metrics();
 
-    expect(text).toContain('status_class="5xx"')
+    expect(text).toContain('status_class="5xx"');
     // Only the two known route labels should ever appear.
-    const routeMatches = [...text.matchAll(/route="([^"]+)"/g)].map(m => m[1])
+    const routeMatches = [...text.matchAll(/route="([^"]+)"/g)].map(m => m[1]);
     for (const route of routeMatches) {
-      expect(["search", "docs-image"]).toContain(route)
+      expect(["search", "docs-image"]).toContain(route);
     }
-  })
-})
+  });
+});
diff --git a/src/__tests__/page-map-hive-arm.test.ts b/src/__tests__/page-map-hive-arm.test.ts
index 79c4814..97cb35b 100644
--- a/src/__tests__/page-map-hive-arm.test.ts
+++ b/src/__tests__/page-map-hive-arm.test.ts
@@ -1,5 +1,5 @@
-import { describe, expect, it } from 'vitest'
-import { buildPageMap } from '../app/docs/page-map'
+import { describe, expect, it } from "vitest";
+import { buildPageMap } from "../app/docs/page-map";
 
 /**
  * Coverage for the 'hive' arm of getNavStructure() (page-map.ts:527-528)
@@ -14,66 +14,73 @@ import { buildPageMap } from '../app/docs/page-map'
  */
 
 type PageNode = {
-  kind: 'Folder' | 'MdxPage' | 'Meta'
-  name?: string
-  route?: string
-  children?: PageNode[]
-}
+  kind: "Folder" | "MdxPage" | "Meta";
+  name?: string;
+  route?: string;
+  children?: PageNode[];
+};
 
 type BuildResult = {
-  pageMap: PageNode[]
-  routeMap: Record<string, string>
-  filePaths: string[]
-  contentPath: string
-}
+  pageMap: PageNode[];
+  routeMap: Record<string, string>;
+  filePaths: string[];
+  contentPath: string;
+};
 
 function flatten(nodes: PageNode[]): PageNode[] {
-  return nodes.flatMap((n) => [n, ...flatten(n.children || [])])
+  return nodes.flatMap(n => [n, ...flatten(n.children || [])]);
 }
 
 describe("buildPageMap('hive') — getNavStructure switch arm", () => {
-  it('uses the hive base path (not the default kubestellar base)', () => {
-    const { pageMap } = buildPageMap('hive') as unknown as BuildResult
-    const flat = flatten(pageMap)
+  it("uses the hive base path (not the default kubestellar base)", () => {
+    const { pageMap } = buildPageMap("hive") as unknown as BuildResult;
+    const flat = flatten(pageMap);
     const hiveNodes = flat.filter(
-      (n) => typeof n.route === 'string' && n.route.startsWith('/docs/hive/')
-    )
-    expect(hiveNodes.length).toBeGreaterThan(0)
-  })
+      n => typeof n.route === "string" && n.route.startsWith("/docs/hive/")
+    );
+    expect(hiveNodes.length).toBeGreaterThan(0);
+  });
 
   it('exposes NAV_STRUCTURE_HIVE top-level sections ("Overview" and "Operations")', () => {
     // If the switch fell through to the kubestellar default, the top-level
     // categories would include "Getting Started" and "User Guide" — not the
     // hive-specific "Operations" section.
-    const { pageMap } = buildPageMap('hive') as unknown as BuildResult
-    const titles = pageMap.map((n) => n.name)
-    expect(titles).toContain('Overview')
-    expect(titles).toContain('Operations')
-  })
+    const { pageMap } = buildPageMap("hive") as unknown as BuildResult;
+    const titles = pageMap.map(n => n.name);
+    expect(titles).toContain("Overview");
+    expect(titles).toContain("Operations");
+  });
 
-  it('publishes the operator security guide in the Security section', () => {
-    const { pageMap, routeMap, filePaths } = buildPageMap('hive') as unknown as BuildResult
-    const security = pageMap.find((node) => node.name === 'Security')
-    expect(flatten(security?.children || [])).toContainEqual(expect.objectContaining({
-      kind: 'MdxPage',
-      name: 'Securing your hive',
-      route: '/docs/hive/security/securing-your-hive',
-    }))
-    expect(routeMap['security/securing-your-hive']).toBe('securing-your-hive.md')
-    expect(routeMap['securing-your-hive']).toBe('securing-your-hive.md')
-    expect(filePaths).toContain('securing-your-hive.md')
-  })
+  it("publishes the operator security guide in the Security section", () => {
+    const { pageMap, routeMap, filePaths } = buildPageMap(
+      "hive"
+    ) as unknown as BuildResult;
+    const security = pageMap.find(node => node.name === "Security");
+    expect(flatten(security?.children || [])).toContainEqual(
+      expect.objectContaining({
+        kind: "MdxPage",
+        name: "Securing your hive",
+        route: "/docs/hive/security/securing-your-hive",
+      })
+    );
+    expect(routeMap["security/securing-your-hive"]).toBe(
+      "securing-your-hive.md"
+    );
+    expect(routeMap["securing-your-hive"]).toBe("securing-your-hive.md");
+    expect(filePaths).toContain("securing-your-hive.md");
+  });
 
-  it('registers hive-specific pages such as architecture.md and governor.md', () => {
-    const { routeMap, filePaths } = buildPageMap('hive') as unknown as BuildResult
-    expect(filePaths).toContain('architecture.md')
-    expect(filePaths).toContain('governor.md')
+  it("registers hive-specific pages such as architecture.md and governor.md", () => {
+    const { routeMap, filePaths } = buildPageMap(
+      "hive"
+    ) as unknown as BuildResult;
+    expect(filePaths).toContain("architecture.md");
+    expect(filePaths).toContain("governor.md");
     // The Operations section maps { 'Governor': 'governor.md' } via a
     // slugified title, so the route key ends with '/governor'.
     const governorKey = Object.keys(routeMap).find(
-      (k) => routeMap[k] === 'governor.md',
-    )
-    expect(governorKey).toBeDefined()
-  })
-
-})
+      k => routeMap[k] === "governor.md"
+    );
+    expect(governorKey).toBeDefined();
+  });
+});
diff --git a/src/__tests__/proxy.test.ts b/src/__tests__/proxy.test.ts
index 2ac2fa9..3bd6f5a 100644
--- a/src/__tests__/proxy.test.ts
+++ b/src/__tests__/proxy.test.ts
@@ -1,85 +1,102 @@
-import { describe, expect, it, vi } from 'vitest'
-import { NextRequest, NextResponse } from 'next/server'
+import { describe, expect, it, vi } from "vitest";
+import { NextRequest, NextResponse } from "next/server";
 
-vi.mock('next-intl/middleware', () => ({
+vi.mock("next-intl/middleware", () => ({
   default: () => (request: NextRequest) => {
-    const url = request.nextUrl.clone()
+    const url = request.nextUrl.clone();
     if (!url.pathname.match(/^\/(en|hi|ja|es|de|fr|it|SC|zh-TW|pt)(?:\/|$)/)) {
-      url.pathname = `/en${url.pathname}`
+      url.pathname = `/en${url.pathname}`;
     }
-    return NextResponse.rewrite(url)
+    return NextResponse.rewrite(url);
   },
-}))
+}));
 
-const { config, proxy } = await import('../proxy')
+const { config, proxy } = await import("../proxy");
 
 function request(pathname: string) {
-  return new NextRequest(new URL(pathname, 'https://docs.hivecommons.dev'))
+  return new NextRequest(new URL(pathname, "https://docs.hivecommons.dev"));
 }
 
-describe('proxy', () => {
-  it('redirects the site root to the docs landing page without permanent caching', () => {
-    const response = proxy(request('/'))
-
-    expect(response.status).toBe(307)
-    expect(response.headers.get('location')).toBe('https://docs.hivecommons.dev/docs')
-  })
-
-  it('redirects localized docs paths to canonical unlocalized docs paths', () => {
-    const response = proxy(request('/es/docs/architecture?tab=install'))
-
-    expect(response.status).toBe(307)
-    expect(response.headers.get('location')).toBe('https://docs.hivecommons.dev/docs/architecture?tab=install')
-  })
-
-  it('redirects exact localized docs landing paths to the canonical docs landing path', () => {
-    const response = proxy(request('/en/docs'))
-
-    expect(response.status).toBe(307)
-    expect(response.headers.get('location')).toBe('https://docs.hivecommons.dev/docs')
-  })
-
-  it('handles uppercase and region locales when canonicalizing docs paths', () => {
-    expect(proxy(request('/SC/docs/readme')).headers.get('location')).toBe('https://docs.hivecommons.dev/docs/readme')
-    expect(proxy(request('/zh-TW/docs/readme')).headers.get('location')).toBe('https://docs.hivecommons.dev/docs/readme')
-  })
-
-
-  it('redirects region-qualified docs locales to canonical docs paths', () => {
-    const response = proxy(request('/pt-BR/docs/hive/setup'))
-
-    expect(response.status).toBe(307)
-    expect(response.headers.get('location')).toBe('https://docs.hivecommons.dev/docs/hive/setup')
-  })
-
-  it('does not treat three-letter prefixes as localized docs URLs', () => {
-    const response = proxy(request('/abc/docs/page'))
-
-    expect(response.status).toBe(200)
-    expect(response.headers.get('x-middleware-rewrite')).toBe('https://docs.hivecommons.dev/en/abc/docs/page')
-    expect(response.headers.get('location')).toBeNull()
-  })
-
-  it('keeps non-doc localized pages in the i18n middleware flow', () => {
-    const response = proxy(request('/es/community'))
-
-    expect(response.status).toBe(200)
-    expect(response.headers.get('x-middleware-rewrite')).toBe('https://docs.hivecommons.dev/es/community')
-    expect(response.headers.get('location')).toBeNull()
-  })
-
-  it('rewrites unlocalized pages through the default locale middleware', () => {
-    const response = proxy(request('/community'))
-
-    expect(response.status).toBe(200)
-    expect(response.headers.get('x-middleware-rewrite')).toBe('https://docs.hivecommons.dev/en/community')
-    expect(response.headers.get('location')).toBeNull()
-  })
-
-  it('does not run on canonical docs, API, Next.js asset, or file-extension paths', () => {
+describe("proxy", () => {
+  it("redirects the site root to the docs landing page without permanent caching", () => {
+    const response = proxy(request("/"));
+
+    expect(response.status).toBe(307);
+    expect(response.headers.get("location")).toBe(
+      "https://docs.hivecommons.dev/docs"
+    );
+  });
+
+  it("redirects localized docs paths to canonical unlocalized docs paths", () => {
+    const response = proxy(request("/es/docs/architecture?tab=install"));
+
+    expect(response.status).toBe(307);
+    expect(response.headers.get("location")).toBe(
+      "https://docs.hivecommons.dev/docs/architecture?tab=install"
+    );
+  });
+
+  it("redirects exact localized docs landing paths to the canonical docs landing path", () => {
+    const response = proxy(request("/en/docs"));
+
+    expect(response.status).toBe(307);
+    expect(response.headers.get("location")).toBe(
+      "https://docs.hivecommons.dev/docs"
+    );
+  });
+
+  it("handles uppercase and region locales when canonicalizing docs paths", () => {
+    expect(proxy(request("/SC/docs/readme")).headers.get("location")).toBe(
+      "https://docs.hivecommons.dev/docs/readme"
+    );
+    expect(proxy(request("/zh-TW/docs/readme")).headers.get("location")).toBe(
+      "https://docs.hivecommons.dev/docs/readme"
+    );
+  });
+
+  it("redirects region-qualified docs locales to canonical docs paths", () => {
+    const response = proxy(request("/pt-BR/docs/hive/setup"));
+
+    expect(response.status).toBe(307);
+    expect(response.headers.get("location")).toBe(
+      "https://docs.hivecommons.dev/docs/hive/setup"
+    );
+  });
+
+  it("does not treat three-letter prefixes as localized docs URLs", () => {
+    const response = proxy(request("/abc/docs/page"));
+
+    expect(response.status).toBe(200);
+    expect(response.headers.get("x-middleware-rewrite")).toBe(
+      "https://docs.hivecommons.dev/en/abc/docs/page"
+    );
+    expect(response.headers.get("location")).toBeNull();
+  });
+
+  it("keeps non-doc localized pages in the i18n middleware flow", () => {
+    const response = proxy(request("/es/community"));
+
+    expect(response.status).toBe(200);
+    expect(response.headers.get("x-middleware-rewrite")).toBe(
+      "https://docs.hivecommons.dev/es/community"
+    );
+    expect(response.headers.get("location")).toBeNull();
+  });
+
+  it("rewrites unlocalized pages through the default locale middleware", () => {
+    const response = proxy(request("/community"));
+
+    expect(response.status).toBe(200);
+    expect(response.headers.get("x-middleware-rewrite")).toBe(
+      "https://docs.hivecommons.dev/en/community"
+    );
+    expect(response.headers.get("location")).toBeNull();
+  });
+
+  it("does not run on canonical docs, API, Next.js asset, or file-extension paths", () => {
     expect(config.matcher).toEqual([
-      '/((?!docs|api|_next|_vercel|code|.*\\..*).*)',
-      '/',
-    ])
-  })
-})
+      "/((?!docs|api|_next|_vercel|code|.*\\..*).*)",
+      "/",
+    ]);
+  });
+});
diff --git a/src/__tests__/remarkStripMdxJs.test.ts b/src/__tests__/remarkStripMdxJs.test.ts
index dade32f..b949075 100644
--- a/src/__tests__/remarkStripMdxJs.test.ts
+++ b/src/__tests__/remarkStripMdxJs.test.ts
@@ -1,127 +1,170 @@
-import { describe, it, expect, beforeAll, beforeEach, afterEach, vi } from 'vitest'
-import { compileMdx } from 'nextra/compile'
-import { evaluate } from 'nextra/evaluate'
-import { renderToStaticMarkup } from 'react-dom/server'
-import { createElement } from 'react'
-import { remarkStripMdxJs, stripMdxJs, MDX_JS_NODE_TYPES } from '@/lib/remarkStripMdxJs'
+import {
+  describe,
+  it,
+  expect,
+  beforeAll,
+  beforeEach,
+  afterEach,
+  vi,
+} from "vitest";
+import { compileMdx } from "nextra/compile";
+import { evaluate } from "nextra/evaluate";
+import { renderToStaticMarkup } from "react-dom/server";
+import { createElement } from "react";
+import {
+  remarkStripMdxJs,
+  stripMdxJs,
+  MDX_JS_NODE_TYPES,
+} from "@/lib/remarkStripMdxJs";
 
 // Same shim as docs-page-render.test.ts: under vitest NODE_ENV is "test", so
 // nextra's evaluate() injects the dev JSX runtime while compileMdx emits
 // production _jsx() calls. Re-implement the runtime injection with the
 // production runtime; compile and evaluation of the content stay real.
-vi.mock('nextra/evaluate', async () => {
-  const runtime = await import('react/jsx-runtime')
+vi.mock("nextra/evaluate", async () => {
+  const runtime = await import("react/jsx-runtime");
   return {
-    evaluate(rawJs: string, components = {}, scope: Record<string, unknown> = {}) {
-      const keys = Object.keys(scope)
-      const values = Object.values(scope)
-      const hydrateFn = Reflect.construct(Function, ['$', ...keys, rawJs])
-      return hydrateFn({ ...runtime, useMDXComponents: () => components }, ...values)
+    evaluate(
+      rawJs: string,
+      components = {},
+      scope: Record<string, unknown> = {}
+    ) {
+      const keys = Object.keys(scope);
+      const values = Object.values(scope);
+      const hydrateFn = Reflect.construct(Function, ["$", ...keys, rawJs]);
+      return hydrateFn(
+        { ...runtime, useMDXComponents: () => components },
+        ...values
+      );
     },
-  }
-})
+  };
+});
 
-type Probe = typeof globalThis & { __mdxProbe?: string[] }
-const g = globalThis as Probe
+type Probe = typeof globalThis & { __mdxProbe?: string[] };
+const g = globalThis as Probe;
 
-async function compileAndRender(markdown: string, remarkPlugins: unknown[]): Promise<string> {
+async function compileAndRender(
+  markdown: string,
+  remarkPlugins: unknown[]
+): Promise<string> {
   const compiled = await compileMdx(markdown, {
     mdxOptions: { remarkPlugins: remarkPlugins as never, rehypePlugins: [] },
-  })
-  const evaluated = evaluate(compiled, {})
-  return renderToStaticMarkup(createElement(evaluated.default))
+  });
+  const evaluated = evaluate(compiled, {});
+  return renderToStaticMarkup(createElement(evaluated.default));
 }
 
-const record = (tag: string) => `(globalThis.__mdxProbe ??= []).push(${JSON.stringify(tag)})`
+const record = (tag: string) =>
+  `(globalThis.__mdxProbe ??= []).push(${JSON.stringify(tag)})`;
 
-const ESM = `# Title\n\nexport const leak = (() => { ${record('esm')}; return 1 })()\n\nBody text.\n`
-const FLOW_EXPRESSION = `# Title\n\n{(() => { ${record('flow')}; return 'x' })()}\n\nBody text.\n`
-const TEXT_EXPRESSION = `# Title\n\nBefore {(() => { ${record('text')}; return 'x' })()} after.\n`
-const ATTRIBUTE_EXPRESSION = `# Title\n\n<div title={(() => { ${record('attr')}; return 'x' })()}>inner</div>\n`
-const SPREAD_ATTRIBUTE = `# Title\n\n<div {...(() => { ${record('spread')}; return { id: 'x' } })()}>inner</div>\n`
+const ESM = `# Title\n\nexport const leak = (() => { ${record("esm")}; return 1 })()\n\nBody text.\n`;
+const FLOW_EXPRESSION = `# Title\n\n{(() => { ${record("flow")}; return 'x' })()}\n\nBody text.\n`;
+const TEXT_EXPRESSION = `# Title\n\nBefore {(() => { ${record("text")}; return 'x' })()} after.\n`;
+const ATTRIBUTE_EXPRESSION = `# Title\n\n<div title={(() => { ${record("attr")}; return 'x' })()}>inner</div>\n`;
+const SPREAD_ATTRIBUTE = `# Title\n\n<div {...(() => { ${record("spread")}; return { id: 'x' } })()}>inner</div>\n`;
 
-describe('remarkStripMdxJs', () => {
+describe("remarkStripMdxJs", () => {
   // The first compileMdx call loads the MDX toolchain; keep that cost out of
   // the per-test timeout.
   beforeAll(async () => {
-    await compileMdx('# warm up', { mdxOptions: { remarkPlugins: [], rehypePlugins: [] } })
-  }, 30_000)
+    await compileMdx("# warm up", {
+      mdxOptions: { remarkPlugins: [], rehypePlugins: [] },
+    });
+  }, 30_000);
 
   beforeEach(() => {
-    delete g.__mdxProbe
-  })
+    delete g.__mdxProbe;
+  });
   afterEach(() => {
-    delete g.__mdxProbe
-  })
+    delete g.__mdxProbe;
+  });
 
-  it('without the plugin, content JavaScript executes (the hazard being closed)', async () => {
-    await compileAndRender(ESM, [])
-    expect(g.__mdxProbe).toEqual(['esm'])
-  })
+  it("without the plugin, content JavaScript executes (the hazard being closed)", async () => {
+    await compileAndRender(ESM, []);
+    expect(g.__mdxProbe).toEqual(["esm"]);
+  });
 
   it.each([
-    ['top-level ESM', ESM],
-    ['flow expression', FLOW_EXPRESSION],
-    ['text expression', TEXT_EXPRESSION],
-    ['JSX attribute expression', ATTRIBUTE_EXPRESSION],
-    ['JSX spread attribute', SPREAD_ATTRIBUTE],
-  ])('neutralizes %s', async (_label, markdown) => {
-    const html = await compileAndRender(markdown, [remarkStripMdxJs])
-    expect(g.__mdxProbe).toBeUndefined()
-    expect(html).toContain('Title')
-  })
+    ["top-level ESM", ESM],
+    ["flow expression", FLOW_EXPRESSION],
+    ["text expression", TEXT_EXPRESSION],
+    ["JSX attribute expression", ATTRIBUTE_EXPRESSION],
+    ["JSX spread attribute", SPREAD_ATTRIBUTE],
+  ])("neutralizes %s", async (_label, markdown) => {
+    const html = await compileAndRender(markdown, [remarkStripMdxJs]);
+    expect(g.__mdxProbe).toBeUndefined();
+    expect(html).toContain("Title");
+  });
 
-  it('keeps literal JSX attributes and surrounding content', async () => {
-    const html = await compileAndRender(ATTRIBUTE_EXPRESSION.replace(/title=\{[\s\S]*?\}>/, 'title="plain">'), [
-      remarkStripMdxJs,
-    ])
-    expect(html).toContain('title="plain"')
-    expect(html).toContain('inner')
-  })
+  it("keeps literal JSX attributes and surrounding content", async () => {
+    const html = await compileAndRender(
+      ATTRIBUTE_EXPRESSION.replace(/title=\{[\s\S]*?\}>/, 'title="plain">'),
+      [remarkStripMdxJs]
+    );
+    expect(html).toContain('title="plain"');
+    expect(html).toContain("inner");
+  });
 
   it("preserves nextra's generated metadata and toc exports", async () => {
-    const compiled = await compileMdx(`# Heading One\n\n## Heading Two\n\n${ESM}`, {
-      mdxOptions: { remarkPlugins: [remarkStripMdxJs] as never, rehypePlugins: [] },
-    })
-    const evaluated = evaluate(compiled, {})
-    expect(evaluated.toc.map((entry) => entry.value)).toContain('Heading Two')
-    expect(evaluated.metadata).toBeDefined()
-    expect(g.__mdxProbe).toBeUndefined()
-  })
+    const compiled = await compileMdx(
+      `# Heading One\n\n## Heading Two\n\n${ESM}`,
+      {
+        mdxOptions: {
+          remarkPlugins: [remarkStripMdxJs] as never,
+          rehypePlugins: [],
+        },
+      }
+    );
+    const evaluated = evaluate(compiled, {});
+    expect(evaluated.toc.map(entry => entry.value)).toContain("Heading Two");
+    expect(evaluated.metadata).toBeDefined();
+    expect(g.__mdxProbe).toBeUndefined();
+  });
 
-  it('leaves code fences containing import/export lines as code', async () => {
-    const md = '# Title\n\n```ts\nimport { x } from "y"\nexport const z = 1\n```\n'
-    const html = await compileAndRender(md, [remarkStripMdxJs])
-    expect(html).toContain('import')
-    expect(html).toContain('export')
-  })
+  it("leaves code fences containing import/export lines as code", async () => {
+    const md =
+      '# Title\n\n```ts\nimport { x } from "y"\nexport const z = 1\n```\n';
+    const html = await compileAndRender(md, [remarkStripMdxJs]);
+    expect(html).toContain("import");
+    expect(html).toContain("export");
+  });
 
-  it('stripMdxJs removes JS nodes recursively and tolerates nodes without children', () => {
+  it("stripMdxJs removes JS nodes recursively and tolerates nodes without children", () => {
     const tree = {
-      type: 'root',
+      type: "root",
       children: [
-        { type: 'mdxjsEsm' },
+        { type: "mdxjsEsm" },
         {
-          type: 'paragraph',
-          children: [{ type: 'text' }, { type: 'mdxTextExpression' }],
+          type: "paragraph",
+          children: [{ type: "text" }, { type: "mdxTextExpression" }],
         },
         {
-          type: 'mdxJsxFlowElement',
+          type: "mdxJsxFlowElement",
           attributes: [
-            { type: 'mdxJsxAttribute', value: 'literal' },
-            { type: 'mdxJsxAttribute', value: null },
-            { type: 'mdxJsxAttribute', value: { type: 'mdxJsxAttributeValueExpression' } },
-            { type: 'mdxJsxExpressionAttribute' },
+            { type: "mdxJsxAttribute", value: "literal" },
+            { type: "mdxJsxAttribute", value: null },
+            {
+              type: "mdxJsxAttribute",
+              value: { type: "mdxJsxAttributeValueExpression" },
+            },
+            { type: "mdxJsxExpressionAttribute" },
           ],
-          children: [{ type: 'mdxFlowExpression' }],
+          children: [{ type: "mdxFlowExpression" }],
         },
       ],
-    }
-    const out = stripMdxJs(tree)
-    expect(out.children.map((c) => c.type)).toEqual(['paragraph', 'mdxJsxFlowElement'])
-    expect(out.children[0].children?.map((c) => c.type)).toEqual(['text'])
-    expect(out.children[1].attributes?.map((a) => a.type)).toEqual(['mdxJsxAttribute', 'mdxJsxAttribute'])
-    expect(out.children[1].children).toEqual([])
-    for (const type of MDX_JS_NODE_TYPES) expect(JSON.stringify(out)).not.toContain(type)
-  })
-})
+    };
+    const out = stripMdxJs(tree);
+    expect(out.children.map(c => c.type)).toEqual([
+      "paragraph",
+      "mdxJsxFlowElement",
+    ]);
+    expect(out.children[0].children?.map(c => c.type)).toEqual(["text"]);
+    expect(out.children[1].attributes?.map(a => a.type)).toEqual([
+      "mdxJsxAttribute",
+      "mdxJsxAttribute",
+    ]);
+    expect(out.children[1].children).toEqual([]);
+    for (const type of MDX_JS_NODE_TYPES)
+      expect(JSON.stringify(out)).not.toContain(type);
+  });
+});
diff --git a/src/__tests__/rewriteImagePaths.test.ts b/src/__tests__/rewriteImagePaths.test.ts
index 57e912b..6add2b6 100644
--- a/src/__tests__/rewriteImagePaths.test.ts
+++ b/src/__tests__/rewriteImagePaths.test.ts
@@ -1,75 +1,76 @@
-import { describe, it, expect } from 'vitest'
-import { rewriteRelativeImagePaths } from '@/lib/rewriteImagePaths'
+import { describe, it, expect } from "vitest";
+import { rewriteRelativeImagePaths } from "@/lib/rewriteImagePaths";
 
-describe('rewriteRelativeImagePaths', () => {
-  it('rewrites a bare relative image path with a baseDir', () => {
-    const md = '![Main Dashboard](images/main-dashboard.png)'
-    expect(rewriteRelativeImagePaths(md, 'console')).toBe(
-      '![Main Dashboard](/docs-images/console/images/main-dashboard.png)'
-    )
-  })
+describe("rewriteRelativeImagePaths", () => {
+  it("rewrites a bare relative image path with a baseDir", () => {
+    const md = "![Main Dashboard](images/main-dashboard.png)";
+    expect(rewriteRelativeImagePaths(md, "console")).toBe(
+      "![Main Dashboard](/docs-images/console/images/main-dashboard.png)"
+    );
+  });
 
-  it('rewrites a ./ relative image path', () => {
-    const md = '![Figure 1 - High Level Architecture](./images/high-level-architecture.svg)'
-    expect(rewriteRelativeImagePaths(md, 'kubestellar')).toBe(
-      '![Figure 1 - High Level Architecture](/docs-images/kubestellar/images/high-level-architecture.svg)'
-    )
-  })
+  it("rewrites a ./ relative image path", () => {
+    const md =
+      "![Figure 1 - High Level Architecture](./images/high-level-architecture.svg)";
+    expect(rewriteRelativeImagePaths(md, "kubestellar")).toBe(
+      "![Figure 1 - High Level Architecture](/docs-images/kubestellar/images/high-level-architecture.svg)"
+    );
+  });
 
-  it('rewrites multiple images in the same document', () => {
+  it("rewrites multiple images in the same document", () => {
     const md = [
-      '![Figure 1](./images/fig1.svg)',
-      'Some text in between.',
-      '![Figure 2](./images/fig2.svg)',
-    ].join('\n')
-    const result = rewriteRelativeImagePaths(md, 'kubestellar')
-    expect(result).toContain('/docs-images/kubestellar/images/fig1.svg')
-    expect(result).toContain('/docs-images/kubestellar/images/fig2.svg')
-  })
+      "![Figure 1](./images/fig1.svg)",
+      "Some text in between.",
+      "![Figure 2](./images/fig2.svg)",
+    ].join("\n");
+    const result = rewriteRelativeImagePaths(md, "kubestellar");
+    expect(result).toContain("/docs-images/kubestellar/images/fig1.svg");
+    expect(result).toContain("/docs-images/kubestellar/images/fig2.svg");
+  });
 
-  it('leaves absolute /docs-images paths untouched', () => {
-    const md = '![Foo](/docs-images/console/images/foo.png)'
-    expect(rewriteRelativeImagePaths(md, 'console')).toBe(md)
-  })
+  it("leaves absolute /docs-images paths untouched", () => {
+    const md = "![Foo](/docs-images/console/images/foo.png)";
+    expect(rewriteRelativeImagePaths(md, "console")).toBe(md);
+  });
 
-  it('leaves https:// URLs untouched', () => {
-    const md = '![Ext](https://example.com/img.png)'
-    expect(rewriteRelativeImagePaths(md, 'console')).toBe(md)
-  })
+  it("leaves https:// URLs untouched", () => {
+    const md = "![Ext](https://example.com/img.png)";
+    expect(rewriteRelativeImagePaths(md, "console")).toBe(md);
+  });
 
-  it('leaves http:// URLs untouched', () => {
-    const md = '![Ext](http://example.com/img.png)'
-    expect(rewriteRelativeImagePaths(md, 'console')).toBe(md)
-  })
+  it("leaves http:// URLs untouched", () => {
+    const md = "![Ext](http://example.com/img.png)";
+    expect(rewriteRelativeImagePaths(md, "console")).toBe(md);
+  });
 
-  it('leaves data: URIs untouched', () => {
-    const md = '![Inline](data:image/png;base64,abc123)'
-    expect(rewriteRelativeImagePaths(md, 'console')).toBe(md)
-  })
+  it("leaves data: URIs untouched", () => {
+    const md = "![Inline](data:image/png;base64,abc123)";
+    expect(rewriteRelativeImagePaths(md, "console")).toBe(md);
+  });
 
-  it('leaves anchor-only hrefs untouched', () => {
-    const md = '![link](#section)'
-    expect(rewriteRelativeImagePaths(md, 'console')).toBe(md)
-  })
+  it("leaves anchor-only hrefs untouched", () => {
+    const md = "![link](#section)";
+    expect(rewriteRelativeImagePaths(md, "console")).toBe(md);
+  });
 
-  it('works with an empty baseDir (file at docs/content root)', () => {
-    const md = '![Logo](images/logo.png)'
-    expect(rewriteRelativeImagePaths(md, '')).toBe(
-      '![Logo](/docs-images/images/logo.png)'
-    )
-  })
+  it("works with an empty baseDir (file at docs/content root)", () => {
+    const md = "![Logo](images/logo.png)";
+    expect(rewriteRelativeImagePaths(md, "")).toBe(
+      "![Logo](/docs-images/images/logo.png)"
+    );
+  });
 
-  it('handles subdirectory filePath in baseDir', () => {
-    const md = '![Diagram](diagrams/overview.svg)'
-    expect(rewriteRelativeImagePaths(md, 'kubestellar/setup')).toBe(
-      '![Diagram](/docs-images/kubestellar/setup/diagrams/overview.svg)'
-    )
-  })
+  it("handles subdirectory filePath in baseDir", () => {
+    const md = "![Diagram](diagrams/overview.svg)";
+    expect(rewriteRelativeImagePaths(md, "kubestellar/setup")).toBe(
+      "![Diagram](/docs-images/kubestellar/setup/diagrams/overview.svg)"
+    );
+  });
 
-  it('does not double-rewrite already-absolute paths on a second pass', () => {
-    const md = '![Foo](images/foo.png)'
-    const once = rewriteRelativeImagePaths(md, 'console')
-    const twice = rewriteRelativeImagePaths(once, 'console')
-    expect(twice).toBe(once)
-  })
-})
+  it("does not double-rewrite already-absolute paths on a second pass", () => {
+    const md = "![Foo](images/foo.png)";
+    const once = rewriteRelativeImagePaths(md, "console");
+    const twice = rewriteRelativeImagePaths(once, "console");
+    expect(twice).toBe(once);
+  });
+});
diff --git a/src/__tests__/robots.test.ts b/src/__tests__/robots.test.ts
index 4635e54..e679d70 100644
--- a/src/__tests__/robots.test.ts
+++ b/src/__tests__/robots.test.ts
@@ -1,14 +1,14 @@
-import { describe, expect, it } from 'vitest'
-import robots from '../app/robots'
+import { describe, expect, it } from "vitest";
+import robots from "../app/robots";
 
-describe('robots', () => {
-  it('allows all crawlers and points them at the sitemap', () => {
+describe("robots", () => {
+  it("allows all crawlers and points them at the sitemap", () => {
     expect(robots()).toEqual({
       rules: {
-        userAgent: '*',
-        allow: '/',
+        userAgent: "*",
+        allow: "/",
       },
-      sitemap: 'https://docs.hivecommons.dev/sitemap.xml',
-    })
-  })
-})
+      sitemap: "https://docs.hivecommons.dev/sitemap.xml",
+    });
+  });
+});
diff --git a/src/__tests__/sanitize.contributor-and-img.test.ts b/src/__tests__/sanitize.contributor-and-img.test.ts
index 735d19f..1a6995b 100644
--- a/src/__tests__/sanitize.contributor-and-img.test.ts
+++ b/src/__tests__/sanitize.contributor-and-img.test.ts
@@ -1,5 +1,5 @@
-import { describe, it, expect } from 'vitest'
-import { sanitizeHtmlForMdx } from '../lib/sanitizeHtml'
+import { describe, it, expect } from "vitest";
+import { sanitizeHtmlForMdx } from "../lib/sanitizeHtml";
 
 /**
  * Unit tests for the contributor-table → contributor-cards conversion
@@ -16,139 +16,149 @@ import { sanitizeHtmlForMdx } from '../lib/sanitizeHtml'
 // Contributor table → contributors-grid card conversion
 // ═════════════════════════════════════════════════════════════════════
 
-const contributorTd = (name: string, github: string, avatar = `https://avatars.githubusercontent.com/${github}?v=4`) =>
-  `<td align="center"><a href="https://github.com/${github}"><img src="${avatar}" width="100px;" alt=""/><br /><sub><b>${name}</b></sub></a></td>`
-
-describe('sanitizeHtmlForMdx — contributor table conversion', () => {
-  it('converts a contributors <table> into a contributors-grid <div>', () => {
-    const table = `<table><tr>${contributorTd('Alice', 'alice')}${contributorTd('Bob', 'bob')}</tr></table>`
-    const result = sanitizeHtmlForMdx(table)
-    expect(result).toContain('<div className="contributors-grid">')
-    expect(result).toContain('className="contributor-card"')
-    expect(result).toContain('href="https://github.com/alice"')
-    expect(result).toContain('href="https://github.com/bob"')
-    expect(result).toContain('<span>Alice</span>')
-    expect(result).toContain('<span>Bob</span>')
+const contributorTd = (
+  name: string,
+  github: string,
+  avatar = `https://avatars.githubusercontent.com/${github}?v=4`
+) =>
+  `<td align="center"><a href="https://github.com/${github}"><img src="${avatar}" width="100px;" alt=""/><br /><sub><b>${name}</b></sub></a></td>`;
+
+describe("sanitizeHtmlForMdx — contributor table conversion", () => {
+  it("converts a contributors <table> into a contributors-grid <div>", () => {
+    const table = `<table><tr>${contributorTd("Alice", "alice")}${contributorTd("Bob", "bob")}</tr></table>`;
+    const result = sanitizeHtmlForMdx(table);
+    expect(result).toContain('<div className="contributors-grid">');
+    expect(result).toContain('className="contributor-card"');
+    expect(result).toContain('href="https://github.com/alice"');
+    expect(result).toContain('href="https://github.com/bob"');
+    expect(result).toContain("<span>Alice</span>");
+    expect(result).toContain("<span>Bob</span>");
     // Original <table>/<tr>/<td> markup must be gone.
-    expect(result).not.toContain('<table')
-    expect(result).not.toContain('<tr')
-    expect(result).not.toContain('<td')
-  })
-
-  it('emits an <img> for each contributor with its avatar URL and alt=name', () => {
-    const table = `<table><tr>${contributorTd('Carol', 'carol', 'https://example.com/carol.png')}</tr></table>`
-    const result = sanitizeHtmlForMdx(table)
-    expect(result).toContain('src="https://example.com/carol.png"')
-    expect(result).toContain('alt="Carol"')
-  })
-
-  it('drops a contributors <table> that has no parseable rows', () => {
+    expect(result).not.toContain("<table");
+    expect(result).not.toContain("<tr");
+    expect(result).not.toContain("<td");
+  });
+
+  it("emits an <img> for each contributor with its avatar URL and alt=name", () => {
+    const table = `<table><tr>${contributorTd("Carol", "carol", "https://example.com/carol.png")}</tr></table>`;
+    const result = sanitizeHtmlForMdx(table);
+    expect(result).toContain('src="https://example.com/carol.png"');
+    expect(result).toContain('alt="Carol"');
+  });
+
+  it("drops a contributors <table> that has no parseable rows", () => {
     // No <td>/<a>/<img>/<sub><b> structure — the extractor finds zero
     // contributors, so the whole table must collapse to '' (not leave
     // a bare "<div className='contributors-grid'></div>" behind).
-    const table = '<table><tr><td>Just some text</td></tr></table>'
-    const result = sanitizeHtmlForMdx(table)
-    expect(result).not.toContain('contributors-grid')
-    expect(result).not.toContain('<table')
+    const table = "<table><tr><td>Just some text</td></tr></table>";
+    const result = sanitizeHtmlForMdx(table);
+    expect(result).not.toContain("contributors-grid");
+    expect(result).not.toContain("<table");
     // Leftover <tr>/<td> that isn't converted is stripped by the
     // subsequent tr/td removal passes.
-    expect(result).not.toContain('<tr')
-    expect(result).not.toContain('<td')
-  })
+    expect(result).not.toContain("<tr");
+    expect(result).not.toContain("<td");
+  });
 
-  it('extracts the GitHub username from the profile URL', () => {
+  it("extracts the GitHub username from the profile URL", () => {
     // The extractor's github field is derived from the profile URL. We can
     // verify it indirectly by ensuring the profile href round-trips
     // correctly for a real-world GitHub URL.
-    const table = `<table><tr>${contributorTd('Dave', 'dave-user-123')}</tr></table>`
-    const result = sanitizeHtmlForMdx(table)
-    expect(result).toContain('href="https://github.com/dave-user-123"')
-  })
+    const table = `<table><tr>${contributorTd("Dave", "dave-user-123")}</tr></table>`;
+    const result = sanitizeHtmlForMdx(table);
+    expect(result).toContain('href="https://github.com/dave-user-123"');
+  });
 
-  it('escapes special characters in contributor names and URLs', () => {
+  it("escapes special characters in contributor names and URLs", () => {
     // A name containing quote/angle chars must be HTML-escaped in both
     // the <span>name</span> and the alt="…" attribute so it cannot
     // break out of attribute context.
-    const evil = `<td align="center"><a href="https://github.com/x&y"><img src="https://x/?a=1&b=2" width="1" alt=""/><br /><sub><b>Al"ice</b></sub></a></td>`
-    const result = sanitizeHtmlForMdx(`<table><tr>${evil}</tr></table>`)
-    expect(result).toContain('&amp;')
-    expect(result).toContain('&quot;')
+    const evil = `<td align="center"><a href="https://github.com/x&y"><img src="https://x/?a=1&b=2" width="1" alt=""/><br /><sub><b>Al"ice</b></sub></a></td>`;
+    const result = sanitizeHtmlForMdx(`<table><tr>${evil}</tr></table>`);
+    expect(result).toContain("&amp;");
+    expect(result).toContain("&quot;");
     // Raw unescaped double-quote must not appear inside the emitted name.
-    expect(result).not.toMatch(/<span>[^<]*"[^<]*<\/span>/)
-  })
-})
+    expect(result).not.toMatch(/<span>[^<]*"[^<]*<\/span>/);
+  });
+});
 
 // ═════════════════════════════════════════════════════════════════════
 // <tr> / <td> leftover cleanup (outside contributor tables)
 // ═════════════════════════════════════════════════════════════════════
 
-describe('sanitizeHtmlForMdx — stray tr/td removal', () => {
-  it('removes bare <tr>...</tr> not wrapped in a <table>', () => {
-    const result = sanitizeHtmlForMdx('<p>ok</p><tr><td>x</td></tr><p>done</p>')
-    expect(result).toContain('<p>ok</p>')
-    expect(result).toContain('<p>done</p>')
-    expect(result).not.toContain('<tr')
-    expect(result).not.toContain('<td')
-  })
-
-  it('removes attribute-bearing <td …>…</td>', () => {
-    const result = sanitizeHtmlForMdx('<td colspan="2" style="color:red">cell</td>')
-    expect(result).not.toContain('<td')
-    expect(result).not.toContain('cell')
-  })
-})
+describe("sanitizeHtmlForMdx — stray tr/td removal", () => {
+  it("removes bare <tr>...</tr> not wrapped in a <table>", () => {
+    const result = sanitizeHtmlForMdx(
+      "<p>ok</p><tr><td>x</td></tr><p>done</p>"
+    );
+    expect(result).toContain("<p>ok</p>");
+    expect(result).toContain("<p>done</p>");
+    expect(result).not.toContain("<tr");
+    expect(result).not.toContain("<td");
+  });
+
+  it("removes attribute-bearing <td …>…</td>", () => {
+    const result = sanitizeHtmlForMdx(
+      '<td colspan="2" style="color:red">cell</td>'
+    );
+    expect(result).not.toContain("<td");
+    expect(result).not.toContain("cell");
+  });
+});
 
 // ═════════════════════════════════════════════════════════════════════
 // <img> tag normalization
 // ═════════════════════════════════════════════════════════════════════
 
-describe('sanitizeHtmlForMdx — img normalization', () => {
+describe("sanitizeHtmlForMdx — img normalization", () => {
   it('normalizes <img src="…" alt="…"> into a self-closing tag', () => {
-    const result = sanitizeHtmlForMdx('<img src="/a.png" alt="A">')
-    expect(result).toBe('<img src="/a.png" alt="A" />')
-  })
-
-  it('normalizes an already-self-closing <img … />', () => {
-    const result = sanitizeHtmlForMdx('<img src="/a.png" alt="A" />')
-    expect(result).toBe('<img src="/a.png" alt="A" />')
-  })
-
-  it('preserves a title attribute when present', () => {
-    const result = sanitizeHtmlForMdx('<img src="/a.png" alt="A" title="tip">')
-    expect(result).toContain('title="tip"')
-    expect(result).toContain('src="/a.png"')
-    expect(result).toContain('alt="A"')
-  })
+    const result = sanitizeHtmlForMdx('<img src="/a.png" alt="A">');
+    expect(result).toBe('<img src="/a.png" alt="A" />');
+  });
+
+  it("normalizes an already-self-closing <img … />", () => {
+    const result = sanitizeHtmlForMdx('<img src="/a.png" alt="A" />');
+    expect(result).toBe('<img src="/a.png" alt="A" />');
+  });
+
+  it("preserves a title attribute when present", () => {
+    const result = sanitizeHtmlForMdx('<img src="/a.png" alt="A" title="tip">');
+    expect(result).toContain('title="tip"');
+    expect(result).toContain('src="/a.png"');
+    expect(result).toContain('alt="A"');
+  });
 
   it('defaults alt="" when the source has no alt attribute', () => {
-    const result = sanitizeHtmlForMdx('<img src="/a.png">')
-    expect(result).toContain('src="/a.png"')
-    expect(result).toContain('alt=""')
-  })
-
-  it('drops an <img> tag that has no src attribute', () => {
-    const result = sanitizeHtmlForMdx('<p>hi</p><img alt="orphan"><p>bye</p>')
-    expect(result).toContain('<p>hi</p>')
-    expect(result).toContain('<p>bye</p>')
-    expect(result).not.toContain('<img')
-    expect(result).not.toContain('orphan')
-  })
-
-  it('escapes special characters in src, alt, and title attributes', () => {
+    const result = sanitizeHtmlForMdx('<img src="/a.png">');
+    expect(result).toContain('src="/a.png"');
+    expect(result).toContain('alt=""');
+  });
+
+  it("drops an <img> tag that has no src attribute", () => {
+    const result = sanitizeHtmlForMdx('<p>hi</p><img alt="orphan"><p>bye</p>');
+    expect(result).toContain("<p>hi</p>");
+    expect(result).toContain("<p>bye</p>");
+    expect(result).not.toContain("<img");
+    expect(result).not.toContain("orphan");
+  });
+
+  it("escapes special characters in src, alt, and title attributes", () => {
     // A src or alt value that contains angle brackets or ampersands must
     // be HTML-encoded so it cannot re-introduce tags or break out of
     // the attribute context.
-    const result = sanitizeHtmlForMdx('<img src="/a.png?x=1&y=2" alt="A & B">')
-    expect(result).toContain('src="/a.png?x=1&amp;y=2"')
-    expect(result).toContain('alt="A &amp; B"')
-  })
+    const result = sanitizeHtmlForMdx('<img src="/a.png?x=1&y=2" alt="A & B">');
+    expect(result).toContain('src="/a.png?x=1&amp;y=2"');
+    expect(result).toContain('alt="A &amp; B"');
+  });
 
-  it('strips width/height/align attributes on the img tag', () => {
+  it("strips width/height/align attributes on the img tag", () => {
     // These attributes are stripped globally before img normalization
     // runs, so the normalized output must omit them entirely.
-    const result = sanitizeHtmlForMdx('<img src="/a.png" alt="A" width="100" height="50" align="left">')
-    expect(result).not.toMatch(/width=/i)
-    expect(result).not.toMatch(/height=/i)
-    expect(result).not.toMatch(/align=/i)
-  })
-})
+    const result = sanitizeHtmlForMdx(
+      '<img src="/a.png" alt="A" width="100" height="50" align="left">'
+    );
+    expect(result).not.toMatch(/width=/i);
+    expect(result).not.toMatch(/height=/i);
+    expect(result).not.toMatch(/align=/i);
+  });
+});
diff --git a/src/__tests__/sanitize.contributor-non-github-url.test.ts b/src/__tests__/sanitize.contributor-non-github-url.test.ts
index f3f51bd..639e688 100644
--- a/src/__tests__/sanitize.contributor-non-github-url.test.ts
+++ b/src/__tests__/sanitize.contributor-non-github-url.test.ts
@@ -1,5 +1,5 @@
-import { describe, it, expect } from 'vitest'
-import { sanitizeHtmlForMdx } from '../lib/sanitizeHtml'
+import { describe, it, expect } from "vitest";
+import { sanitizeHtmlForMdx } from "../lib/sanitizeHtml";
 
 /**
  * Targets the falsy arm of the `githubMatch ? githubMatch[1] : ''`
@@ -13,44 +13,48 @@ import { sanitizeHtmlForMdx } from '../lib/sanitizeHtml'
  * break rendering of the whole page's contributor grid.
  */
 
-describe('sanitizeHtmlForMdx — contributor with non-github profile URL', () => {
+describe("sanitizeHtmlForMdx — contributor with non-github profile URL", () => {
   const nonGithubTd = (name: string, profileUrl: string, avatar: string) =>
-    `<td align="center"><a href="${profileUrl}"><img src="${avatar}" width="100px;" alt=""/><br /><sub><b>${name}</b></sub></a></td>`
+    `<td align="center"><a href="${profileUrl}"><img src="${avatar}" width="100px;" alt=""/><br /><sub><b>${name}</b></sub></a></td>`;
 
-  it('emits a contributor card when the profile URL is not github.com', () => {
-    const table = `<table><tr>${nonGithubTd('Eve', 'https://gitlab.com/eve', 'https://example.com/eve.png')}</tr></table>`
-    const result = sanitizeHtmlForMdx(table)
+  it("emits a contributor card when the profile URL is not github.com", () => {
+    const table = `<table><tr>${nonGithubTd("Eve", "https://gitlab.com/eve", "https://example.com/eve.png")}</tr></table>`;
+    const result = sanitizeHtmlForMdx(table);
     // The grid still renders — the contributor is not dropped just because
     // the profile URL is off-platform.
-    expect(result).toContain('<div className="contributors-grid">')
-    expect(result).toContain('className="contributor-card"')
-    expect(result).toContain('href="https://gitlab.com/eve"')
-    expect(result).toContain('<span>Eve</span>')
-    expect(result).toContain('src="https://example.com/eve.png"')
-    expect(result).toContain('alt="Eve"')
-  })
+    expect(result).toContain('<div className="contributors-grid">');
+    expect(result).toContain('className="contributor-card"');
+    expect(result).toContain('href="https://gitlab.com/eve"');
+    expect(result).toContain("<span>Eve</span>");
+    expect(result).toContain('src="https://example.com/eve.png"');
+    expect(result).toContain('alt="Eve"');
+  });
 
-  it('mixes github and non-github contributors in a single table', () => {
+  it("mixes github and non-github contributors in a single table", () => {
     const rows =
-      nonGithubTd('Frank', 'https://gitlab.com/frank', 'https://example.com/frank.png') +
-      `<td align="center"><a href="https://github.com/grace"><img src="https://avatars.githubusercontent.com/grace?v=4" width="100px;" alt=""/><br /><sub><b>Grace</b></sub></a></td>`
-    const result = sanitizeHtmlForMdx(`<table><tr>${rows}</tr></table>`)
+      nonGithubTd(
+        "Frank",
+        "https://gitlab.com/frank",
+        "https://example.com/frank.png"
+      ) +
+      `<td align="center"><a href="https://github.com/grace"><img src="https://avatars.githubusercontent.com/grace?v=4" width="100px;" alt=""/><br /><sub><b>Grace</b></sub></a></td>`;
+    const result = sanitizeHtmlForMdx(`<table><tr>${rows}</tr></table>`);
     // Both contributors survive.
-    expect(result).toContain('<span>Frank</span>')
-    expect(result).toContain('<span>Grace</span>')
-    expect(result).toContain('href="https://gitlab.com/frank"')
-    expect(result).toContain('href="https://github.com/grace"')
-  })
+    expect(result).toContain("<span>Frank</span>");
+    expect(result).toContain("<span>Grace</span>");
+    expect(result).toContain('href="https://gitlab.com/frank"');
+    expect(result).toContain('href="https://github.com/grace"');
+  });
 
-  it('handles a bare hostname (no path) profile URL without throwing', () => {
+  it("handles a bare hostname (no path) profile URL without throwing", () => {
     // The `github.com/([^/]+)` regex requires a slash after github.com;
     // a bare "https://example.org" href hits the `: ''` fallback arm.
-    const table = `<table><tr>${nonGithubTd('Heidi', 'https://example.org', 'https://example.org/h.png')}</tr></table>`
-    const result = sanitizeHtmlForMdx(table)
-    expect(result).toContain('<span>Heidi</span>')
-    expect(result).toContain('href="https://example.org"')
+    const table = `<table><tr>${nonGithubTd("Heidi", "https://example.org", "https://example.org/h.png")}</tr></table>`;
+    const result = sanitizeHtmlForMdx(table);
+    expect(result).toContain("<span>Heidi</span>");
+    expect(result).toContain('href="https://example.org"');
     // No stray "undefined" or "null" leaked into the emitted card.
-    expect(result).not.toContain('undefined')
-    expect(result).not.toContain('null')
-  })
-})
+    expect(result).not.toContain("undefined");
+    expect(result).not.toContain("null");
+  });
+});
diff --git a/src/__tests__/sanitize.contributor-nongithub.test.ts b/src/__tests__/sanitize.contributor-nongithub.test.ts
index ce1841c..6bd6f90 100644
--- a/src/__tests__/sanitize.contributor-nongithub.test.ts
+++ b/src/__tests__/sanitize.contributor-nongithub.test.ts
@@ -1,5 +1,5 @@
-import { describe, it, expect } from 'vitest'
-import { sanitizeHtmlForMdx } from '../lib/sanitizeHtml'
+import { describe, it, expect } from "vitest";
+import { sanitizeHtmlForMdx } from "../lib/sanitizeHtml";
 
 /**
  * Coverage for the "profile URL is not a github.com URL" branch of the
@@ -11,37 +11,37 @@ import { sanitizeHtmlForMdx } from '../lib/sanitizeHtml'
  * that indexes into null), contributor rendering would fail silently
  * on GitHub Enterprise or self-hosted profile links.
  */
-describe('sanitizeHtmlForMdx — contributor with non-github profile URL', () => {
-  it('still emits a contributor card when the profile URL is not on github.com', () => {
+describe("sanitizeHtmlForMdx — contributor with non-github profile URL", () => {
+  it("still emits a contributor card when the profile URL is not on github.com", () => {
     // Note: profile URL is https://example.com/... — the extractor's
     // profileUrl.match(/github\.com\/([^/]+)/) returns null and the
     // ternary yields github = '' without throwing.
-    const td = `<td align="center"><a href="https://example.com/carol"><img src="https://example.com/carol.png" width="1" alt=""/><br /><sub><b>Carol</b></sub></a></td>`
-    const result = sanitizeHtmlForMdx(`<table><tr>${td}</tr></table>`)
+    const td = `<td align="center"><a href="https://example.com/carol"><img src="https://example.com/carol.png" width="1" alt=""/><br /><sub><b>Carol</b></sub></a></td>`;
+    const result = sanitizeHtmlForMdx(`<table><tr>${td}</tr></table>`);
 
-    expect(result).toContain('<div className="contributors-grid">')
-    expect(result).toContain('className="contributor-card"')
+    expect(result).toContain('<div className="contributors-grid">');
+    expect(result).toContain('className="contributor-card"');
     // Profile URL round-trips even though it isn't on github.com.
-    expect(result).toContain('href="https://example.com/carol"')
-    expect(result).toContain('<span>Carol</span>')
-    expect(result).toContain('src="https://example.com/carol.png"')
+    expect(result).toContain('href="https://example.com/carol"');
+    expect(result).toContain("<span>Carol</span>");
+    expect(result).toContain('src="https://example.com/carol.png"');
     // No table remnants leak through.
-    expect(result).not.toContain('<table')
-    expect(result).not.toContain('<td')
-  })
+    expect(result).not.toContain("<table");
+    expect(result).not.toContain("<td");
+  });
 
-  it('mixes github and non-github contributors in the same table', () => {
+  it("mixes github and non-github contributors in the same table", () => {
     // Verifies the ternary picks the correct branch per-row, not just per
     // table. If a future refactor lifts the regex outside the loop this
     // test would fail.
     const rows = [
       `<td align="center"><a href="https://github.com/alice"><img src="https://avatars.githubusercontent.com/alice?v=4" width="1" alt=""/><br /><sub><b>Alice</b></sub></a></td>`,
       `<td align="center"><a href="https://gitlab.example/bob"><img src="https://gitlab.example/bob.png" width="1" alt=""/><br /><sub><b>Bob</b></sub></a></td>`,
-    ].join('')
-    const result = sanitizeHtmlForMdx(`<table><tr>${rows}</tr></table>`)
-    expect(result).toContain('href="https://github.com/alice"')
-    expect(result).toContain('href="https://gitlab.example/bob"')
-    expect(result).toContain('<span>Alice</span>')
-    expect(result).toContain('<span>Bob</span>')
-  })
-})
+    ].join("");
+    const result = sanitizeHtmlForMdx(`<table><tr>${rows}</tr></table>`);
+    expect(result).toContain('href="https://github.com/alice"');
+    expect(result).toContain('href="https://gitlab.example/bob"');
+    expect(result).toContain("<span>Alice</span>");
+    expect(result).toContain("<span>Bob</span>");
+  });
+});
diff --git a/src/__tests__/sanitize.test.ts b/src/__tests__/sanitize.test.ts
index fb641a0..57a27a0 100644
--- a/src/__tests__/sanitize.test.ts
+++ b/src/__tests__/sanitize.test.ts
@@ -1,5 +1,9 @@
-import { describe, it, expect } from 'vitest'
-import { sanitizeHtmlForMdx, removeCommentPatterns, stripUntilStable } from '../lib/sanitizeHtml'
+import { describe, it, expect } from "vitest";
+import {
+  sanitizeHtmlForMdx,
+  removeCommentPatterns,
+  stripUntilStable,
+} from "../lib/sanitizeHtml";
 
 /**
  * Unit tests for the sanitizeHtmlForMdx() function.
@@ -20,362 +24,441 @@ import { sanitizeHtmlForMdx, removeCommentPatterns, stripUntilStable } from '../
 // Script tag removal (CodeQL #190: js/bad-tag-filter)
 // ═══════════════════════════════════════════════════════════════════════
 
-describe('sanitizeHtmlForMdx — script removal', () => {
-  it('strips basic <script>...</script>', () => {
-    const result = sanitizeHtmlForMdx('<p>Hello</p><script>alert(1)</script><p>World</p>')
-    expect(result).toContain('<p>Hello</p>')
-    expect(result).toContain('<p>World</p>')
-    expect(result).not.toContain('script')
-    expect(result).not.toContain('alert')
-  })
-
-  it('strips script with attributes', () => {
-    const result = sanitizeHtmlForMdx('<script type="text/javascript" src="evil.js"></script>')
-    expect(result).not.toContain('script')
-    expect(result).not.toContain('evil')
-  })
-
-  it('strips </script > with trailing whitespace in close tag', () => {
-    const result = sanitizeHtmlForMdx('<script>x</script >')
-    expect(result).not.toContain('script')
-  })
-
-  it('strips </script/foo> attribute-bearing close tag (CodeQL #190 bypass)', () => {
-    const result = sanitizeHtmlForMdx('<script>alert(1)</script foo="bar">')
-    expect(result).not.toContain('script')
-    expect(result).not.toContain('alert')
-  })
-
-  it('strips </script\\n> with newline in close tag', () => {
-    const result = sanitizeHtmlForMdx('<script>x</script\n>')
-    expect(result).not.toContain('script')
-  })
-
-  it('strips nested script reconstruction (stripUntilStable)', () => {
-    const result = sanitizeHtmlForMdx('<scr<script>y</script>ipt>alert(1)</script>')
-    expect(result).not.toContain('alert')
-    expect(result).not.toContain('script')
-  })
-
-  it('strips deeply nested reconstruction', () => {
-    const result = sanitizeHtmlForMdx('<scr<scr<script></script>ipt></script>ipt>evil</script>')
-    expect(result).not.toContain('evil')
-    expect(result).not.toContain('script')
-  })
-
-  it('strips multiple script tags', () => {
-    const result = sanitizeHtmlForMdx('<script>a()</script>text<script>b()</script>')
-    expect(result).toBe('text')
-  })
-})
+describe("sanitizeHtmlForMdx — script removal", () => {
+  it("strips basic <script>...</script>", () => {
+    const result = sanitizeHtmlForMdx(
+      "<p>Hello</p><script>alert(1)</script><p>World</p>"
+    );
+    expect(result).toContain("<p>Hello</p>");
+    expect(result).toContain("<p>World</p>");
+    expect(result).not.toContain("script");
+    expect(result).not.toContain("alert");
+  });
+
+  it("strips script with attributes", () => {
+    const result = sanitizeHtmlForMdx(
+      '<script type="text/javascript" src="evil.js"></script>'
+    );
+    expect(result).not.toContain("script");
+    expect(result).not.toContain("evil");
+  });
+
+  it("strips </script > with trailing whitespace in close tag", () => {
+    const result = sanitizeHtmlForMdx("<script>x</script >");
+    expect(result).not.toContain("script");
+  });
+
+  it("strips </script/foo> attribute-bearing close tag (CodeQL #190 bypass)", () => {
+    const result = sanitizeHtmlForMdx('<script>alert(1)</script foo="bar">');
+    expect(result).not.toContain("script");
+    expect(result).not.toContain("alert");
+  });
+
+  it("strips </script\\n> with newline in close tag", () => {
+    const result = sanitizeHtmlForMdx("<script>x</script\n>");
+    expect(result).not.toContain("script");
+  });
+
+  it("strips nested script reconstruction (stripUntilStable)", () => {
+    const result = sanitizeHtmlForMdx(
+      "<scr<script>y</script>ipt>alert(1)</script>"
+    );
+    expect(result).not.toContain("alert");
+    expect(result).not.toContain("script");
+  });
+
+  it("strips deeply nested reconstruction", () => {
+    const result = sanitizeHtmlForMdx(
+      "<scr<scr<script></script>ipt></script>ipt>evil</script>"
+    );
+    expect(result).not.toContain("evil");
+    expect(result).not.toContain("script");
+  });
+
+  it("strips multiple script tags", () => {
+    const result = sanitizeHtmlForMdx(
+      "<script>a()</script>text<script>b()</script>"
+    );
+    expect(result).toBe("text");
+  });
+});
 
 // ═══════════════════════════════════════════════════════════════════════
 // Comment removal (CodeQL #188: incomplete multi-character sanitization)
 // ═══════════════════════════════════════════════════════════════════════
 
-describe('sanitizeHtmlForMdx — comment removal (via removeCommentPatterns)', () => {
-  it('removes a normal closed comment', () => {
-    const result = removeCommentPatterns('before<!-- comment -->after')
-    expect(result).toBe('beforeafter')
-  })
-
-  it('removes an unclosed comment (residual opener) via loop', () => {
-    const result = removeCommentPatterns('safe<!-- this never closes')
-    expect(result).toBe('safe')
-  })
-
-  it('removes nested comment reconstruction', () => {
-    const result = removeCommentPatterns('start<!-<!--x-->end')
-    expect(result).not.toContain('<!--')
-  })
-
-  it('removes multiple comments', () => {
-    const result = removeCommentPatterns('a<!-- one -->b<!-- two -->c')
-    expect(result).toBe('abc')
-  })
-
-  it('removes multiline comments', () => {
-    const result = removeCommentPatterns('before<!--\nmultiline\ncomment\n-->after')
-    expect(result).toBe('beforeafter')
-  })
-
-  it('removes Jinja-style comments', () => {
-    const result = removeCommentPatterns('text{# jinja comment #}more')
-    expect(result).toBe('textmore')
-  })
-})
+describe("sanitizeHtmlForMdx — comment removal (via removeCommentPatterns)", () => {
+  it("removes a normal closed comment", () => {
+    const result = removeCommentPatterns("before<!-- comment -->after");
+    expect(result).toBe("beforeafter");
+  });
+
+  it("removes an unclosed comment (residual opener) via loop", () => {
+    const result = removeCommentPatterns("safe<!-- this never closes");
+    expect(result).toBe("safe");
+  });
+
+  it("removes nested comment reconstruction", () => {
+    const result = removeCommentPatterns("start<!-<!--x-->end");
+    expect(result).not.toContain("<!--");
+  });
+
+  it("removes multiple comments", () => {
+    const result = removeCommentPatterns("a<!-- one -->b<!-- two -->c");
+    expect(result).toBe("abc");
+  });
+
+  it("removes multiline comments", () => {
+    const result = removeCommentPatterns(
+      "before<!--\nmultiline\ncomment\n-->after"
+    );
+    expect(result).toBe("beforeafter");
+  });
+
+  it("removes Jinja-style comments", () => {
+    const result = removeCommentPatterns("text{# jinja comment #}more");
+    expect(result).toBe("textmore");
+  });
+});
 
 // ═══════════════════════════════════════════════════════════════════════
 // Style tag removal
 // ═══════════════════════════════════════════════════════════════════════
 
-describe('sanitizeHtmlForMdx — style removal', () => {
-  it('strips <style>...</style>', () => {
-    const result = sanitizeHtmlForMdx('<style>body{display:none}</style><p>text</p>')
-    expect(result).not.toContain('style')
-    expect(result).toContain('<p>text</p>')
-  })
-
-  it('strips nested style reconstruction', () => {
-    const result = sanitizeHtmlForMdx('<sty<style>x</style>le>.evil{}</style>')
-    expect(result).not.toContain('style')
-    expect(result).not.toContain('.evil')
-  })
-})
+describe("sanitizeHtmlForMdx — style removal", () => {
+  it("strips <style>...</style>", () => {
+    const result = sanitizeHtmlForMdx(
+      "<style>body{display:none}</style><p>text</p>"
+    );
+    expect(result).not.toContain("style");
+    expect(result).toContain("<p>text</p>");
+  });
+
+  it("strips nested style reconstruction", () => {
+    const result = sanitizeHtmlForMdx("<sty<style>x</style>le>.evil{}</style>");
+    expect(result).not.toContain("style");
+    expect(result).not.toContain(".evil");
+  });
+});
 
 // ═══════════════════════════════════════════════════════════════════════
 // Null bytes and control characters
 // ═══════════════════════════════════════════════════════════════════════
 
-describe('sanitizeHtmlForMdx — control character removal', () => {
-  it('strips null bytes', () => {
-    const result = sanitizeHtmlForMdx('he\x00llo')
-    expect(result).toBe('hello')
-  })
+describe("sanitizeHtmlForMdx — control character removal", () => {
+  it("strips null bytes", () => {
+    const result = sanitizeHtmlForMdx("he\x00llo");
+    expect(result).toBe("hello");
+  });
 
-  it('strips control characters but preserves whitespace', () => {
-    const result = sanitizeHtmlForMdx('line1\n\tline2\x01\x02')
-    expect(result).toBe('line1\n\tline2')
-  })
+  it("strips control characters but preserves whitespace", () => {
+    const result = sanitizeHtmlForMdx("line1\n\tline2\x01\x02");
+    expect(result).toBe("line1\n\tline2");
+  });
 
-  it('strips DEL character (0x7F)', () => {
-    const result = sanitizeHtmlForMdx('test\x7Fvalue')
-    expect(result).toBe('testvalue')
-  })
-})
+  it("strips DEL character (0x7F)", () => {
+    const result = sanitizeHtmlForMdx("test\x7Fvalue");
+    expect(result).toBe("testvalue");
+  });
+});
 
 // ═══════════════════════════════════════════════════════════════════════
 // CDATA, processing instructions, DOCTYPE
 // ═══════════════════════════════════════════════════════════════════════
 
-describe('sanitizeHtmlForMdx — structural HTML removal', () => {
-  it('strips CDATA sections', () => {
-    const result = sanitizeHtmlForMdx('before<![CDATA[malicious content]]>after')
-    expect(result).toBe('beforeafter')
-  })
-
-  it('strips processing instructions', () => {
-    const result = sanitizeHtmlForMdx('before<?xml version="1.0"?>after')
-    expect(result).toBe('beforeafter')
-  })
-
-  it('strips DOCTYPE declarations', () => {
-    const result = sanitizeHtmlForMdx('<!DOCTYPE html><p>content</p>')
-    expect(result).toContain('<p>content</p>')
-    expect(result).not.toContain('DOCTYPE')
-  })
-})
+describe("sanitizeHtmlForMdx — structural HTML removal", () => {
+  it("strips CDATA sections", () => {
+    const result = sanitizeHtmlForMdx(
+      "before<![CDATA[malicious content]]>after"
+    );
+    expect(result).toBe("beforeafter");
+  });
+
+  it("strips processing instructions", () => {
+    const result = sanitizeHtmlForMdx('before<?xml version="1.0"?>after');
+    expect(result).toBe("beforeafter");
+  });
+
+  it("strips DOCTYPE declarations", () => {
+    const result = sanitizeHtmlForMdx("<!DOCTYPE html><p>content</p>");
+    expect(result).toContain("<p>content</p>");
+    expect(result).not.toContain("DOCTYPE");
+  });
+});
 
 // ═══════════════════════════════════════════════════════════════════════
 // Meta, link, base tag removal
 // ═══════════════════════════════════════════════════════════════════════
 
-describe('sanitizeHtmlForMdx — dangerous tag removal', () => {
-  it('strips <meta> tags', () => {
-    const result = sanitizeHtmlForMdx('<meta http-equiv="refresh" content="0;url=evil.com"><p>safe</p>')
-    expect(result).not.toContain('meta')
-    expect(result).toContain('<p>safe</p>')
-  })
-
-  it('strips <link> tags', () => {
-    const result = sanitizeHtmlForMdx('<link rel="stylesheet" href="evil.css"><p>safe</p>')
-    expect(result).not.toContain('link')
-    expect(result).toContain('<p>safe</p>')
-  })
-
-  it('strips <base> tags', () => {
-    const result = sanitizeHtmlForMdx('<base href="https://evil.com/"><a href="/login">Click</a>')
-    expect(result).not.toContain('base')
-    expect(result).toContain('<a href="/login">Click</a>')
-  })
-
-  it('strips <sub> tags (content preserved)', () => {
-    const result = sanitizeHtmlForMdx('H<sub>2</sub>O')
-    expect(result).toBe('H2O')
-  })
-})
+describe("sanitizeHtmlForMdx — dangerous tag removal", () => {
+  it("strips <meta> tags", () => {
+    const result = sanitizeHtmlForMdx(
+      '<meta http-equiv="refresh" content="0;url=evil.com"><p>safe</p>'
+    );
+    expect(result).not.toContain("meta");
+    expect(result).toContain("<p>safe</p>");
+  });
+
+  it("strips <link> tags", () => {
+    const result = sanitizeHtmlForMdx(
+      '<link rel="stylesheet" href="evil.css"><p>safe</p>'
+    );
+    expect(result).not.toContain("link");
+    expect(result).toContain("<p>safe</p>");
+  });
+
+  it("strips <base> tags", () => {
+    const result = sanitizeHtmlForMdx(
+      '<base href="https://evil.com/"><a href="/login">Click</a>'
+    );
+    expect(result).not.toContain("base");
+    expect(result).toContain('<a href="/login">Click</a>');
+  });
+
+  it("strips <sub> tags (content preserved)", () => {
+    const result = sanitizeHtmlForMdx("H<sub>2</sub>O");
+    expect(result).toBe("H2O");
+  });
+});
 
 // ═══════════════════════════════════════════════════════════════════════
 // stripUntilStable helper
 // ═══════════════════════════════════════════════════════════════════════
 
-describe('stripUntilStable', () => {
-  it('removes pattern in one pass when no nesting', () => {
-    const result = stripUntilStable('hello world', /world/g)
-    expect(result).toBe('hello ')
-  })
+describe("stripUntilStable", () => {
+  it("removes pattern in one pass when no nesting", () => {
+    const result = stripUntilStable("hello world", /world/g);
+    expect(result).toBe("hello ");
+  });
 
-  it('removes patterns that emerge after first removal', () => {
+  it("removes patterns that emerge after first removal", () => {
     // '<scr<script>ipt>' → pass 1 removes '<script>' → '<script>' → pass 2 removes it → ''
-    const result = stripUntilStable('<scr<script>ipt>', /<script>/gi)
-    expect(result).toBe('')
-  })
-})
+    const result = stripUntilStable("<scr<script>ipt>", /<script>/gi);
+    expect(result).toBe("");
+  });
+});
 
 // ═══════════════════════════════════════════════════════════════════════
 // Edge cases
 // ═══════════════════════════════════════════════════════════════════════
 
-describe('sanitizeHtmlForMdx — edge cases', () => {
-  it('handles empty input', () => {
-    expect(sanitizeHtmlForMdx('')).toBe('')
-  })
-
-  it('passes through clean markdown-like content', () => {
-    const clean = '# Hello\n\nThis is **bold** and *italic* text.\n\n- item 1\n- item 2'
-    expect(sanitizeHtmlForMdx(clean)).toBe(clean)
-  })
-
-  it('handles mixed attack vectors in one payload', () => {
-    const payload = '<script>a()</script><!-- hidden --><style>.x{}</style><meta charset="utf-8">safe'
-    const result = sanitizeHtmlForMdx(payload)
-    expect(result).not.toContain('script')
-    expect(result).not.toContain('style')
-    expect(result).not.toContain('meta')
-    expect(result).toContain('safe')
-  })
-
-  it('preserves safe HTML tags', () => {
-    const safe = '<p>paragraph</p><div>block</div><strong>bold</strong>'
-    const result = sanitizeHtmlForMdx(safe)
-    expect(result).toContain('<p>paragraph</p>')
-    expect(result).toContain('<div>block</div>')
-    expect(result).toContain('<strong>bold</strong>')
-  })
-
-  it('escapes shell-style placeholders in prose that MDX would parse as JSX, but not inside code', () => {
-    const result = sanitizeHtmlForMdx('Run `tool <prompt>` against <owner>/<repo>.')
-    expect(result).toContain('`tool <prompt>`')
-    expect(result).toContain('&lt;owner&gt;/&lt;repo&gt;')
-  })
-
-  it('escapes multi-word placeholders in prose that look like a JSX opening tag with an attribute', () => {
+describe("sanitizeHtmlForMdx — edge cases", () => {
+  it("handles empty input", () => {
+    expect(sanitizeHtmlForMdx("")).toBe("");
+  });
+
+  it("passes through clean markdown-like content", () => {
+    const clean =
+      "# Hello\n\nThis is **bold** and *italic* text.\n\n- item 1\n- item 2";
+    expect(sanitizeHtmlForMdx(clean)).toBe(clean);
+  });
+
+  it("handles mixed attack vectors in one payload", () => {
+    const payload =
+      '<script>a()</script><!-- hidden --><style>.x{}</style><meta charset="utf-8">safe';
+    const result = sanitizeHtmlForMdx(payload);
+    expect(result).not.toContain("script");
+    expect(result).not.toContain("style");
+    expect(result).not.toContain("meta");
+    expect(result).toContain("safe");
+  });
+
+  it("preserves safe HTML tags", () => {
+    const safe = "<p>paragraph</p><div>block</div><strong>bold</strong>";
+    const result = sanitizeHtmlForMdx(safe);
+    expect(result).toContain("<p>paragraph</p>");
+    expect(result).toContain("<div>block</div>");
+    expect(result).toContain("<strong>bold</strong>");
+  });
+
+  it("escapes shell-style placeholders in prose that MDX would parse as JSX, but not inside code", () => {
+    const result = sanitizeHtmlForMdx(
+      "Run `tool <prompt>` against <owner>/<repo>."
+    );
+    expect(result).toContain("`tool <prompt>`");
+    expect(result).toContain("&lt;owner&gt;/&lt;repo&gt;");
+  });
+
+  it("escapes multi-word placeholders in prose that look like a JSX opening tag with an attribute", () => {
     // A bare `<branch tip>` (no attributes regex previously required an
     // immediate `>` after the tag name) reached the MDX compiler unescaped
     // and was parsed as an unclosed JSX element, failing compilation.
-    const result = sanitizeHtmlForMdx('Upgrade available \u2192 <branch tip> while running.')
-    expect(result).toContain('&lt;branch tip&gt;')
-  })
-
-  it('preserves safe tags that carry real attributes', () => {
-    const result = sanitizeHtmlForMdx('<a href="https://example.com">link</a>')
-    expect(result).toBe('<a href="https://example.com">link</a>')
-  })
-
-  it('normalizes angle-bracket autolinks for MDX', () => {
-    const result = sanitizeHtmlForMdx('See <https://github.com/settings/copilot>.')
-    expect(result).toBe('See [https://github.com/settings/copilot](https://github.com/settings/copilot).')
-  })
-
-  it('handles very long content without hanging (performance)', () => {
-    const longContent = '<p>safe</p>'.repeat(1000)
-    const start = Date.now()
-    const result = sanitizeHtmlForMdx(longContent)
-    const elapsed = Date.now() - start
-    expect(result).toContain('<p>safe</p>')
-    expect(elapsed).toBeLessThan(5000)
-  })
-})
+    const result = sanitizeHtmlForMdx(
+      "Upgrade available \u2192 <branch tip> while running."
+    );
+    expect(result).toContain("&lt;branch tip&gt;");
+  });
+
+  it("preserves safe tags that carry real attributes", () => {
+    const result = sanitizeHtmlForMdx('<a href="https://example.com">link</a>');
+    expect(result).toBe('<a href="https://example.com">link</a>');
+  });
+
+  it("normalizes angle-bracket autolinks for MDX", () => {
+    const result = sanitizeHtmlForMdx(
+      "See <https://github.com/settings/copilot>."
+    );
+    expect(result).toBe(
+      "See [https://github.com/settings/copilot](https://github.com/settings/copilot)."
+    );
+  });
+
+  it("handles very long content without hanging (performance)", () => {
+    const longContent = "<p>safe</p>".repeat(1000);
+    const start = Date.now();
+    const result = sanitizeHtmlForMdx(longContent);
+    const elapsed = Date.now() - start;
+    expect(result).toContain("<p>safe</p>");
+    expect(elapsed).toBeLessThan(5000);
+  });
+});
 
 // ═══════════════════════════════════════════════════════════════════════
 // Angle-bracket placeholders inside code are literal, not escaped
 // ═══════════════════════════════════════════════════════════════════════
 
-describe('sanitizeHtmlForMdx — code spans keep <placeholder> literal', () => {
-  it('leaves <name> untouched inside a fenced code block', () => {
-    const input = '1. Step:\n\n   ```bash\n   cd <repo>\n   spektacular spec status <name>\n   ```\n'
-    const result = sanitizeHtmlForMdx(input)
-    expect(result).toContain('cd <repo>')
-    expect(result).toContain('status <name>')
-    expect(result).not.toContain('&lt;repo&gt;')
-  })
-
-  it('leaves <name> untouched inside inline code', () => {
-    const result = sanitizeHtmlForMdx('Run `spektacular plan status <name>` first.')
-    expect(result).toContain('`spektacular plan status <name>`')
-  })
-
-  it('still escapes unknown tags in prose outside code', () => {
-    const result = sanitizeHtmlForMdx('Replace <repo> with your path.')
-    expect(result).toContain('&lt;repo&gt;')
-  })
-
-  it('falls back to escaping on a table row whose code span contains a pipe', () => {
-    const row = '| `muse` | Muse (`curl -fsSL https://x/install.sh | bash`). Use `muse exec "<prompt>"`. |'
-    const result = sanitizeHtmlForMdx(row)
-    expect(result).toContain('&lt;prompt&gt;')
-  })
-
-  it('keeps <name> literal in a table row whose code spans have no pipe', () => {
-    const result = sanitizeHtmlForMdx('| verb | `spektacular spec status <name>` |')
-    expect(result).toContain('status <name>`')
-  })
-
-  it('still strips script tags that appear inside a fence-like span', () => {
-    const result = sanitizeHtmlForMdx('```\n<script>alert(1)</script>\n```')
-    expect(result).not.toContain('<script>')
-  })
-})
-
-describe('URL scheme neutralization in href/src attributes', () => {
-  it('rewrites javascript: hrefs to an inert fragment', () => {
-    const result = sanitizeHtmlForMdx('<a href="javascript:alert(document.cookie)">click me</a>')
-    expect(result).toBe('<a href="#">click me</a>')
-  })
-
-  it('is case-insensitive on the scheme', () => {
-    const result = sanitizeHtmlForMdx('<a href="JaVaScRiPt:alert(1)">x</a>')
-    expect(result).toBe('<a href="#">x</a>')
-  })
-
-  it('rewrites data: and vbscript: URLs', () => {
-    expect(sanitizeHtmlForMdx('<a href="vbscript:msgbox(1)">x</a>')).toBe('<a href="#">x</a>')
-    expect(sanitizeHtmlForMdx('<a href="data:text/html;base64,PHNjcmlwdD4=">x</a>')).toBe('<a href="#">x</a>')
-  })
-
-  it('catches whitespace- and control-character-obfuscated schemes', () => {
-    expect(sanitizeHtmlForMdx('<a href="java\tscript:alert(1)">x</a>')).toBe('<a href="#">x</a>')
-    expect(sanitizeHtmlForMdx('<a href=" javascript:alert(1)">x</a>')).toBe('<a href="#">x</a>')
-    expect(sanitizeHtmlForMdx('<a href="jav&#x0A;ascript:alert(1)">x</a>')).toBe('<a href="#">x</a>')
-  })
-
-  it('catches character-reference-encoded schemes', () => {
-    expect(sanitizeHtmlForMdx('<a href="&#106;avascript:alert(1)">x</a>')).toBe('<a href="#">x</a>')
-    expect(sanitizeHtmlForMdx('<a href="&#x6A;avascript:alert(1)">x</a>')).toBe('<a href="#">x</a>')
-    expect(sanitizeHtmlForMdx('<a href="javascript&colon;alert(1)">x</a>')).toBe('<a href="#">x</a>')
-  })
-
-  it('neutralizes disallowed schemes flowing into contributor cards', () => {
-    const table = '<table><tr><td><a href="javascript:alert(1)"><img src="https://avatars.githubusercontent.com/u/1"/><br/><sub><b>Mallory</b></sub></a></td></tr></table>'
-    const result = sanitizeHtmlForMdx(table)
-    expect(result).not.toContain('javascript:')
-    expect(result).toContain('href="#"')
-  })
-
-  it('keeps http, https, mailto, relative, fragment and scheme-relative URLs', () => {
-    expect(sanitizeHtmlForMdx('<a href="https://example.com/a?b=c#d">x</a>')).toContain('href="https://example.com/a?b=c#d"')
-    expect(sanitizeHtmlForMdx('<a href="http://example.com">x</a>')).toContain('href="http://example.com"')
-    expect(sanitizeHtmlForMdx('<a href="mailto:team@example.com">x</a>')).toContain('href="mailto:team@example.com"')
-    expect(sanitizeHtmlForMdx('<a href="/docs/hive/overview">x</a>')).toContain('href="/docs/hive/overview"')
-    expect(sanitizeHtmlForMdx('<a href="../sibling.md">x</a>')).toContain('href="../sibling.md"')
-    expect(sanitizeHtmlForMdx('<a href="#section">x</a>')).toContain('href="#section"')
-    expect(sanitizeHtmlForMdx('<a href="//example.com/x">x</a>')).toContain('href="//example.com/x"')
-  })
-
-  it('leaves img src URLs with allowed schemes untouched', () => {
-    const result = sanitizeHtmlForMdx('<img src="https://raw.githubusercontent.com/o/r/main/a.png" alt="a" />')
-    expect(result).toContain('src="https://raw.githubusercontent.com/o/r/main/a.png"')
-  })
-
-  it('does not rewrite URLs inside code fences or inline code', () => {
-    const fenced = sanitizeHtmlForMdx('```\n<a href="ftp://example.com">x</a>\n```')
-    expect(fenced).toContain('ftp://example.com')
-    const inline = sanitizeHtmlForMdx('use `<a href="file:///etc">x</a>` here')
-    expect(inline).toContain('file:///etc')
-  })
-
-  it('treats out-of-range character references as hostile', () => {
-    const result = sanitizeHtmlForMdx('<a href="&#x110000;javascript:alert(1)">x</a>')
-    expect(result).toContain('href="#"')
-  })
-})
+describe("sanitizeHtmlForMdx — code spans keep <placeholder> literal", () => {
+  it("leaves <name> untouched inside a fenced code block", () => {
+    const input =
+      "1. Step:\n\n   ```bash\n   cd <repo>\n   spektacular spec status <name>\n   ```\n";
+    const result = sanitizeHtmlForMdx(input);
+    expect(result).toContain("cd <repo>");
+    expect(result).toContain("status <name>");
+    expect(result).not.toContain("&lt;repo&gt;");
+  });
+
+  it("leaves <name> untouched inside inline code", () => {
+    const result = sanitizeHtmlForMdx(
+      "Run `spektacular plan status <name>` first."
+    );
+    expect(result).toContain("`spektacular plan status <name>`");
+  });
+
+  it("still escapes unknown tags in prose outside code", () => {
+    const result = sanitizeHtmlForMdx("Replace <repo> with your path.");
+    expect(result).toContain("&lt;repo&gt;");
+  });
+
+  it("falls back to escaping on a table row whose code span contains a pipe", () => {
+    const row =
+      '| `muse` | Muse (`curl -fsSL https://x/install.sh | bash`). Use `muse exec "<prompt>"`. |';
+    const result = sanitizeHtmlForMdx(row);
+    expect(result).toContain("&lt;prompt&gt;");
+  });
+
+  it("keeps <name> literal in a table row whose code spans have no pipe", () => {
+    const result = sanitizeHtmlForMdx(
+      "| verb | `spektacular spec status <name>` |"
+    );
+    expect(result).toContain("status <name>`");
+  });
+
+  it("still strips script tags that appear inside a fence-like span", () => {
+    const result = sanitizeHtmlForMdx("```\n<script>alert(1)</script>\n```");
+    expect(result).not.toContain("<script>");
+  });
+});
+
+describe("URL scheme neutralization in href/src attributes", () => {
+  it("rewrites javascript: hrefs to an inert fragment", () => {
+    const result = sanitizeHtmlForMdx(
+      '<a href="javascript:alert(document.cookie)">click me</a>'
+    );
+    expect(result).toBe('<a href="#">click me</a>');
+  });
+
+  it("is case-insensitive on the scheme", () => {
+    const result = sanitizeHtmlForMdx('<a href="JaVaScRiPt:alert(1)">x</a>');
+    expect(result).toBe('<a href="#">x</a>');
+  });
+
+  it("rewrites data: and vbscript: URLs", () => {
+    expect(sanitizeHtmlForMdx('<a href="vbscript:msgbox(1)">x</a>')).toBe(
+      '<a href="#">x</a>'
+    );
+    expect(
+      sanitizeHtmlForMdx('<a href="data:text/html;base64,PHNjcmlwdD4=">x</a>')
+    ).toBe('<a href="#">x</a>');
+  });
+
+  it("catches whitespace- and control-character-obfuscated schemes", () => {
+    expect(sanitizeHtmlForMdx('<a href="java\tscript:alert(1)">x</a>')).toBe(
+      '<a href="#">x</a>'
+    );
+    expect(sanitizeHtmlForMdx('<a href=" javascript:alert(1)">x</a>')).toBe(
+      '<a href="#">x</a>'
+    );
+    expect(
+      sanitizeHtmlForMdx('<a href="jav&#x0A;ascript:alert(1)">x</a>')
+    ).toBe('<a href="#">x</a>');
+  });
+
+  it("catches character-reference-encoded schemes", () => {
+    expect(sanitizeHtmlForMdx('<a href="&#106;avascript:alert(1)">x</a>')).toBe(
+      '<a href="#">x</a>'
+    );
+    expect(sanitizeHtmlForMdx('<a href="&#x6A;avascript:alert(1)">x</a>')).toBe(
+      '<a href="#">x</a>'
+    );
+    expect(
+      sanitizeHtmlForMdx('<a href="javascript&colon;alert(1)">x</a>')
+    ).toBe('<a href="#">x</a>');
+  });
+
+  it("neutralizes disallowed schemes flowing into contributor cards", () => {
+    const table =
+      '<table><tr><td><a href="javascript:alert(1)"><img src="https://avatars.githubusercontent.com/u/1"/><br/><sub><b>Mallory</b></sub></a></td></tr></table>';
+    const result = sanitizeHtmlForMdx(table);
+    expect(result).not.toContain("javascript:");
+    expect(result).toContain('href="#"');
+  });
+
+  it("keeps http, https, mailto, relative, fragment and scheme-relative URLs", () => {
+    expect(
+      sanitizeHtmlForMdx('<a href="https://example.com/a?b=c#d">x</a>')
+    ).toContain('href="https://example.com/a?b=c#d"');
+    expect(sanitizeHtmlForMdx('<a href="http://example.com">x</a>')).toContain(
+      'href="http://example.com"'
+    );
+    expect(
+      sanitizeHtmlForMdx('<a href="mailto:team@example.com">x</a>')
+    ).toContain('href="mailto:team@example.com"');
+    expect(sanitizeHtmlForMdx('<a href="/docs/hive/overview">x</a>')).toContain(
+      'href="/docs/hive/overview"'
+    );
+    expect(sanitizeHtmlForMdx('<a href="../sibling.md">x</a>')).toContain(
+      'href="../sibling.md"'
+    );
+    expect(sanitizeHtmlForMdx('<a href="#section">x</a>')).toContain(
+      'href="#section"'
+    );
+    expect(sanitizeHtmlForMdx('<a href="//example.com/x">x</a>')).toContain(
+      'href="//example.com/x"'
+    );
+  });
+
+  it("leaves img src URLs with allowed schemes untouched", () => {
+    const result = sanitizeHtmlForMdx(
+      '<img src="https://raw.githubusercontent.com/o/r/main/a.png" alt="a" />'
+    );
+    expect(result).toContain(
+      'src="https://raw.githubusercontent.com/o/r/main/a.png"'
+    );
+  });
+
+  it("does not rewrite URLs inside code fences or inline code", () => {
+    const fenced = sanitizeHtmlForMdx(
+      '```\n<a href="ftp://example.com">x</a>\n```'
+    );
+    expect(fenced).toContain("ftp://example.com");
+    const inline = sanitizeHtmlForMdx('use `<a href="file:///etc">x</a>` here');
+    expect(inline).toContain("file:///etc");
+  });
+
+  it("treats out-of-range character references as hostile", () => {
+    const result = sanitizeHtmlForMdx(
+      '<a href="&#x110000;javascript:alert(1)">x</a>'
+    );
+    expect(result).toContain('href="#"');
+  });
+});
diff --git a/src/__tests__/search-route.extra.test.ts b/src/__tests__/search-route.extra.test.ts
index 4ad9284..ce91479 100644
--- a/src/__tests__/search-route.extra.test.ts
+++ b/src/__tests__/search-route.extra.test.ts
@@ -1,4 +1,4 @@
-import { describe, it, expect, vi, beforeEach } from 'vitest'
+import { describe, it, expect, vi, beforeEach } from "vitest";
 
 /**
  * Additional coverage for /api/search route handler branches not exercised
@@ -15,86 +15,88 @@ import { describe, it, expect, vi, beforeEach } from 'vitest'
 const { mockRouteMap, mockFiles, mockFsFail } = vi.hoisted(() => {
   const mockRouteMap: Record<string, string> = {
     // Empty routeKey maps to root docs (routeKeyToUrl empty branch)
-    '': 'index.mdx',
+    "": "index.mdx",
     // No `# ` heading in the file: extractTitle uses fallback (routeKey basename)
-    'guides/no-heading': 'guides/no-heading.mdx',
-    'guides/long-doc': 'guides/long-doc.mdx',
+    "guides/no-heading": "guides/no-heading.mdx",
+    "guides/long-doc": "guides/long-doc.mdx",
     // Short content so snippet fallback is < 140 chars (no ellipsis)
-    'guides/short-doc': 'guides/short-doc.mdx',
+    "guides/short-doc": "guides/short-doc.mdx",
     // Rich markdown to exercise toPlainText transforms
-    'guides/rich': 'guides/rich.mdx',
+    "guides/rich": "guides/rich.mdx",
     // Missing file → readLocalFile returns null (existsSync false branch)
-    'guides/missing': 'guides/missing.mdx',
+    "guides/missing": "guides/missing.mdx",
     // Throwing file → readLocalFile catch branch
-    'guides/throws': 'guides/throws.mdx',
-  }
+    "guides/throws": "guides/throws.mdx",
+  };
 
-  const longBody = 'Zulu Yankee Xray content. '.repeat(20) // ~500 chars, no title-word overlap
+  const longBody = "Zulu Yankee Xray content. ".repeat(20); // ~500 chars, no title-word overlap
   const mockFiles: Record<string, string> = {
-    'index.mdx': '# Home\n\nWelcome home.',
-    'guides/no-heading.mdx':
-      'Zulu Yankee Xray prose about upgrading, no leading title in file.',
-    'guides/long-doc.mdx': `# AlphaBravoCharlie\n\n${longBody}`,
-    'guides/short-doc.mdx': '# Short\n\nJust a short doc body.',
-    'guides/rich.mdx':
-      '# Rich Doc\n\n' +
-      '```bash\ncode block should be stripped\n```\n\n' +
-      'Inline `code` here.\n\n' +
-      '<!-- html comment removed -->\n\n' +
-      '## Section\n\n' +
-      '**bold text** and *italic text* and _underscore italic_.\n\n' +
-      '[link text](https://example.com) and ![alt](img.png)\n\n' +
-      '---\n\n' +
+    "index.mdx": "# Home\n\nWelcome home.",
+    "guides/no-heading.mdx":
+      "Zulu Yankee Xray prose about upgrading, no leading title in file.",
+    "guides/long-doc.mdx": `# AlphaBravoCharlie\n\n${longBody}`,
+    "guides/short-doc.mdx": "# Short\n\nJust a short doc body.",
+    "guides/rich.mdx":
+      "# Rich Doc\n\n" +
+      "```bash\ncode block should be stripped\n```\n\n" +
+      "Inline `code` here.\n\n" +
+      "<!-- html comment removed -->\n\n" +
+      "## Section\n\n" +
+      "**bold text** and *italic text* and _underscore italic_.\n\n" +
+      "[link text](https://example.com) and ![alt](img.png)\n\n" +
+      "---\n\n" +
       '<span class="x">span</span> tag stripped.\n\n' +
-      'Nested comment bypass: <!-<!--payload-->\n',
-  }
+      "Nested comment bypass: <!-<!--payload-->\n",
+  };
 
-  return { mockRouteMap, mockFiles, mockFsFail: { path: 'guides/throws.mdx' } }
-})
+  return { mockRouteMap, mockFiles, mockFsFail: { path: "guides/throws.mdx" } };
+});
 
-vi.mock('fs', () => ({
+vi.mock("fs", () => ({
   default: {
     existsSync: (filePath: string) => {
-      const rel = filePath.replace(/.*\/docs\/content\//, '')
-      if (rel === mockFsFail.path) throw new Error('boom')
-      return rel in mockFiles
+      const rel = filePath.replace(/.*\/docs\/content\//, "");
+      if (rel === mockFsFail.path) throw new Error("boom");
+      return rel in mockFiles;
     },
     readFileSync: (filePath: string) => {
-      const rel = filePath.replace(/.*\/docs\/content\//, '')
-      return mockFiles[rel] || ''
+      const rel = filePath.replace(/.*\/docs\/content\//, "");
+      return mockFiles[rel] || "";
     },
   },
-}))
+}));
 
-vi.mock('../app/docs/page-map', () => ({
+vi.mock("../app/docs/page-map", () => ({
   buildPageMap: () => ({ routeMap: mockRouteMap }),
-  docsContentPath: '/fake/docs/content',
-  basePath: 'docs',
-}))
+  docsContentPath: "/fake/docs/content",
+  basePath: "docs",
+}));
 
-vi.mock('@/lib/transformMdx', () => ({
+vi.mock("@/lib/transformMdx", () => ({
   convertHtmlScriptsToJsxComments: (content: string) => content,
-}))
+}));
 
-vi.mock('path', async () => {
-  const actual = await vi.importActual<typeof import('path')>('path')
+vi.mock("path", async () => {
+  const actual = await vi.importActual<typeof import("path")>("path");
   return {
     ...actual,
     default: {
       ...actual,
-      join: (...parts: string[]) => parts.join('/').replace(/\/+/g, '/'),
+      join: (...parts: string[]) => parts.join("/").replace(/\/+/g, "/"),
     },
-  }
-})
+  };
+});
 
 class MockNextRequest {
-  nextUrl: { searchParams: URLSearchParams }
+  nextUrl: { searchParams: URLSearchParams };
   constructor(query: string) {
-    this.nextUrl = { searchParams: new URLSearchParams(query ? `q=${query}` : '') }
+    this.nextUrl = {
+      searchParams: new URLSearchParams(query ? `q=${query}` : ""),
+    };
   }
 }
 
-vi.mock('next/server', () => ({
+vi.mock("next/server", () => ({
   NextRequest: MockNextRequest,
   NextResponse: {
     json: (body: unknown, init?: { status?: number }) => ({
@@ -102,134 +104,136 @@ vi.mock('next/server', () => ({
       status: init?.status || 200,
     }),
   },
-}))
+}));
 
-let GET: (request: any) => Promise<any>
+let GET: (request: any) => Promise<any>;
 
 beforeEach(async () => {
-  vi.resetModules()
-  const mod = await import('../app/api/search/route')
-  GET = mod.GET
-})
-
-describe('GET /api/search (extra branches)', () => {
-  it('maps the empty routeKey to /<basePath> (no trailing slug)', async () => {
-    const req = new MockNextRequest('welcome')
-    const res = await GET(req)
-    const root = res.body.results.find((r: any) => r.title === 'Home')
-    expect(root).toBeDefined()
+  vi.resetModules();
+  const mod = await import("../app/api/search/route");
+  GET = mod.GET;
+});
+
+describe("GET /api/search (extra branches)", () => {
+  it("maps the empty routeKey to /<basePath> (no trailing slug)", async () => {
+    const req = new MockNextRequest("welcome");
+    const res = await GET(req);
+    const root = res.body.results.find((r: any) => r.title === "Home");
+    expect(root).toBeDefined();
     // routeKeyToUrl('') → `/${basePath}`
-    expect(root.url).toBe('/docs')
-  })
+    expect(root.url).toBe("/docs");
+  });
 
-  it('uses routeKey basename as fallback title when no `# heading` present', async () => {
+  it("uses routeKey basename as fallback title when no `# heading` present", async () => {
     // Body contains "upgrading" so contentMatch is true; the fallback title
     // path is what we're asserting on.
-    const req = new MockNextRequest('upgrading')
-    const res = await GET(req)
+    const req = new MockNextRequest("upgrading");
+    const res = await GET(req);
     const hit = res.body.results.find(
-      (r: any) => r.url === '/docs/guides/no-heading'
-    )
-    expect(hit).toBeDefined()
+      (r: any) => r.url === "/docs/guides/no-heading"
+    );
+    expect(hit).toBeDefined();
     // 'no-heading' → 'No Heading'
-    expect(hit.title).toBe('No Heading')
-  })
+    expect(hit.title).toBe("No Heading");
+  });
 
-  it('long doc: title-only match uses text.slice(0, 140) + ellipsis for snippet', async () => {
+  it("long doc: title-only match uses text.slice(0, 140) + ellipsis for snippet", async () => {
     // Title-only match is only possible when title (a fallback) doesn't appear
     // in the body text. Use the no-heading route: fallback title "No Heading",
     // body has no "no heading" substring.
-    const req = new MockNextRequest('no heading')
-    const res = await GET(req)
+    const req = new MockNextRequest("no heading");
+    const res = await GET(req);
     const hit = res.body.results.find(
-      (r: any) => r.url === '/docs/guides/no-heading'
-    )
-    expect(hit).toBeDefined()
-    expect(hit.matchType).toBe('title')
+      (r: any) => r.url === "/docs/guides/no-heading"
+    );
+    expect(hit).toBeDefined();
+    expect(hit.matchType).toBe("title");
     // Body ~65 chars < 140 → no ellipsis suffix on this one
     // Instead, verify no <mark> since we hit the title-only else-branch.
-    expect(hit.highlightedSnippet).not.toContain('<mark>')
-  })
+    expect(hit.highlightedSnippet).not.toContain("<mark>");
+  });
 
-  it('long doc: content-match snippet fires <mark> around the query', async () => {
+  it("long doc: content-match snippet fires <mark> around the query", async () => {
     // Also exercises the ellipsis-both-ends branch when idx is mid-document.
-    const req = new MockNextRequest('yankee')
-    const res = await GET(req)
+    const req = new MockNextRequest("yankee");
+    const res = await GET(req);
     const hit = res.body.results.find(
-      (r: any) => r.title === 'AlphaBravoCharlie'
-    )
-    expect(hit).toBeDefined()
-    expect(hit.matchType).toBe('content')
-    expect(hit.highlightedSnippet).toContain('<mark>')
+      (r: any) => r.title === "AlphaBravoCharlie"
+    );
+    expect(hit).toBeDefined();
+    expect(hit.matchType).toBe("content");
+    expect(hit.highlightedSnippet).toContain("<mark>");
     // Body > 140 chars and idx > 60 → both leading and trailing ellipsis
-    expect(hit.snippet.endsWith('...')).toBe(true)
-  })
-
-  it('short doc: title-only match produces snippet without trailing ellipsis', async () => {
-    const req = new MockNextRequest('short')
-    const res = await GET(req)
-    const hit = res.body.results.find((r: any) => r.title === 'Short')
-    expect(hit).toBeDefined()
+    expect(hit.snippet.endsWith("...")).toBe(true);
+  });
+
+  it("short doc: title-only match produces snippet without trailing ellipsis", async () => {
+    const req = new MockNextRequest("short");
+    const res = await GET(req);
+    const hit = res.body.results.find((r: any) => r.title === "Short");
+    expect(hit).toBeDefined();
     // text is well under 140 chars → no ellipsis suffix
-    expect(hit.snippet.endsWith('...')).toBe(false)
-  })
-
-  it('toPlainText strips code blocks, inline code, HTML comments, and links', async () => {
-    const req = new MockNextRequest('rich doc')
-    const res = await GET(req)
-    const hit = res.body.results.find((r: any) => r.title === 'Rich Doc')
-    expect(hit).toBeDefined()
+    expect(hit.snippet.endsWith("...")).toBe(false);
+  });
+
+  it("toPlainText strips code blocks, inline code, HTML comments, and links", async () => {
+    const req = new MockNextRequest("rich doc");
+    const res = await GET(req);
+    const hit = res.body.results.find((r: any) => r.title === "Rich Doc");
+    expect(hit).toBeDefined();
     // Code block content, inline code delimiters, comments, and raw HTML tags removed
-    expect(hit.content).not.toContain('```')
-    expect(hit.content).not.toContain('code block should be stripped')
-    expect(hit.content).not.toContain('<!--')
-    expect(hit.content).not.toContain('<span')
+    expect(hit.content).not.toContain("```");
+    expect(hit.content).not.toContain("code block should be stripped");
+    expect(hit.content).not.toContain("<!--");
+    expect(hit.content).not.toContain("<span");
     // Bold/italic markers removed but text preserved
-    expect(hit.content).toContain('bold text')
-    expect(hit.content).toContain('italic text')
-    expect(hit.content).toContain('underscore italic')
+    expect(hit.content).toContain("bold text");
+    expect(hit.content).toContain("italic text");
+    expect(hit.content).toContain("underscore italic");
     // Link text preserved, image dropped
-    expect(hit.content).toContain('link text')
-    expect(hit.content).not.toContain('![alt]')
+    expect(hit.content).toContain("link text");
+    expect(hit.content).not.toContain("![alt]");
     // The inner `<!--payload-->` gets stripped by the stable loop
-    expect(hit.content).not.toContain('payload')
-  })
+    expect(hit.content).not.toContain("payload");
+  });
 
-  it('readLocalFile: missing file is silently skipped (existsSync=false)', async () => {
-    const req = new MockNextRequest('should-never-match-nonsense')
-    const res = await GET(req)
+  it("readLocalFile: missing file is silently skipped (existsSync=false)", async () => {
+    const req = new MockNextRequest("should-never-match-nonsense");
+    const res = await GET(req);
     // No result for the missing route
     expect(
-      res.body.results.find((r: any) => r.url === '/docs/guides/missing')
-    ).toBeUndefined()
-  })
+      res.body.results.find((r: any) => r.url === "/docs/guides/missing")
+    ).toBeUndefined();
+  });
 
-  it('readLocalFile: fs errors are swallowed (catch branch)', async () => {
+  it("readLocalFile: fs errors are swallowed (catch branch)", async () => {
     // guides/throws throws inside existsSync — must not surface as 500
-    const req = new MockNextRequest('rich')
-    const res = await GET(req)
+    const req = new MockNextRequest("rich");
+    const res = await GET(req);
     // Handler still returns 200 with the other results
-    expect(res.status).toBe(200)
-    expect(res.body.results.find((r: any) => r.title === 'Rich Doc')).toBeDefined()
-  })
+    expect(res.status).toBe(200);
+    expect(
+      res.body.results.find((r: any) => r.title === "Rich Doc")
+    ).toBeDefined();
+  });
 
-  it('GET catch block: buildPageMap throws → 500 JSON with empty results', async () => {
-    vi.resetModules()
-    vi.doMock('../app/docs/page-map', () => ({
+  it("GET catch block: buildPageMap throws → 500 JSON with empty results", async () => {
+    vi.resetModules();
+    vi.doMock("../app/docs/page-map", () => ({
       buildPageMap: () => {
-        throw new Error('page-map exploded')
+        throw new Error("page-map exploded");
       },
-      docsContentPath: '/fake/docs/content',
-      basePath: 'docs',
-    }))
-    const errSpy = vi.spyOn(console, 'error').mockImplementation(() => {})
-    const mod = await import('../app/api/search/route')
-    const req = new MockNextRequest('anything')
-    const res = await mod.GET(req as any)
-    expect(res.status).toBe(500)
-    expect(res.body.error).toBe('Search failed')
-    expect(res.body.results).toEqual([])
-    expect(res.body.count).toBe(0)
-    errSpy.mockRestore()
-  })
-})
+      docsContentPath: "/fake/docs/content",
+      basePath: "docs",
+    }));
+    const errSpy = vi.spyOn(console, "error").mockImplementation(() => {});
+    const mod = await import("../app/api/search/route");
+    const req = new MockNextRequest("anything");
+    const res = await mod.GET(req as any);
+    expect(res.status).toBe(500);
+    expect(res.body.error).toBe("Search failed");
+    expect(res.body.results).toEqual([]);
+    expect(res.body.count).toBe(0);
+    errSpy.mockRestore();
+  });
+});
diff --git a/src/__tests__/search-route.hive-project-file.test.ts b/src/__tests__/search-route.hive-project-file.test.ts
index 3704bf6..c8e5a7f 100644
--- a/src/__tests__/search-route.hive-project-file.test.ts
+++ b/src/__tests__/search-route.hive-project-file.test.ts
@@ -1,4 +1,4 @@
-import { describe, it, expect, vi, beforeEach } from 'vitest'
+import { describe, it, expect, vi, beforeEach } from "vitest";
 
 /**
  * Regression test for the /api/search route silently excluding hive-project
@@ -14,65 +14,67 @@ import { describe, it, expect, vi, beforeEach } from 'vitest'
 const { mockRouteMap, mockFiles } = vi.hoisted(() => {
   const mockRouteMap: Record<string, string> = {
     // Lives at docs/content/hive/release-channels.md, not docs/content/.
-    'operations/release-channels': 'release-channels.md',
+    "operations/release-channels": "release-channels.md",
     // A general-section page that does live directly under docs/content/.
-    'community/what-is-hive-commons': 'community/what-is-hive-commons.md',
-  }
+    "community/what-is-hive-commons": "community/what-is-hive-commons.md",
+  };
 
   const mockFiles: Record<string, string> = {
     // Keyed by path relative to docs/content/hive/.
-    'hive/release-channels.md':
-      '# Release Channels\n\nHive publishes three release channels: stable, candidate, edge.',
+    "hive/release-channels.md":
+      "# Release Channels\n\nHive publishes three release channels: stable, candidate, edge.",
     // Keyed by path relative to docs/content/.
-    'community/what-is-hive-commons.md':
-      '# What is Hive Commons?\n\nAn umbrella community.',
-  }
+    "community/what-is-hive-commons.md":
+      "# What is Hive Commons?\n\nAn umbrella community.",
+  };
 
-  return { mockRouteMap, mockFiles }
-})
+  return { mockRouteMap, mockFiles };
+});
 
-vi.mock('fs', () => ({
+vi.mock("fs", () => ({
   default: {
     existsSync: (filePath: string) => {
-      const rel = filePath.replace(/.*\/docs\/content\//, '')
-      return rel in mockFiles
+      const rel = filePath.replace(/.*\/docs\/content\//, "");
+      return rel in mockFiles;
     },
     readFileSync: (filePath: string) => {
-      const rel = filePath.replace(/.*\/docs\/content\//, '')
-      return mockFiles[rel] || ''
+      const rel = filePath.replace(/.*\/docs\/content\//, "");
+      return mockFiles[rel] || "";
     },
   },
-}))
+}));
 
-vi.mock('../app/docs/page-map', () => ({
+vi.mock("../app/docs/page-map", () => ({
   buildPageMap: () => ({ routeMap: mockRouteMap }),
-  docsContentPath: '/fake/docs/content',
-  basePath: 'docs',
-}))
+  docsContentPath: "/fake/docs/content",
+  basePath: "docs",
+}));
 
-vi.mock('@/lib/transformMdx', () => ({
+vi.mock("@/lib/transformMdx", () => ({
   convertHtmlScriptsToJsxComments: (content: string) => content,
-}))
+}));
 
-vi.mock('path', async () => {
-  const actual = await vi.importActual<typeof import('path')>('path')
+vi.mock("path", async () => {
+  const actual = await vi.importActual<typeof import("path")>("path");
   return {
     ...actual,
     default: {
       ...actual,
-      join: (...parts: string[]) => parts.join('/').replace(/\/+/g, '/'),
+      join: (...parts: string[]) => parts.join("/").replace(/\/+/g, "/"),
     },
-  }
-})
+  };
+});
 
 class MockNextRequest {
-  nextUrl: { searchParams: URLSearchParams }
+  nextUrl: { searchParams: URLSearchParams };
   constructor(query: string) {
-    this.nextUrl = { searchParams: new URLSearchParams(query ? `q=${query}` : '') }
+    this.nextUrl = {
+      searchParams: new URLSearchParams(query ? `q=${query}` : ""),
+    };
   }
 }
 
-vi.mock('next/server', () => ({
+vi.mock("next/server", () => ({
   NextRequest: MockNextRequest,
   NextResponse: {
     json: (body: unknown, init?: { status?: number }) => ({
@@ -80,30 +82,34 @@ vi.mock('next/server', () => ({
       status: init?.status || 200,
     }),
   },
-}))
+}));
 
-let GET: (request: any) => Promise<any>
+let GET: (request: any) => Promise<any>;
 
 beforeEach(async () => {
-  vi.resetModules()
-  const mod = await import('../app/api/search/route')
-  GET = mod.GET
-})
+  vi.resetModules();
+  const mod = await import("../app/api/search/route");
+  GET = mod.GET;
+});
 
-describe('GET /api/search — hive project file fallback', () => {
-  it('finds content from a hive-project-only page and links it under /docs/hive/', async () => {
-    const req = new MockNextRequest('channel')
-    const res = await GET(req)
-    const hit = res.body.results.find((r: any) => r.title === 'Release Channels')
-    expect(hit).toBeDefined()
-    expect(hit.url).toBe('/docs/hive/operations/release-channels')
-  })
+describe("GET /api/search — hive project file fallback", () => {
+  it("finds content from a hive-project-only page and links it under /docs/hive/", async () => {
+    const req = new MockNextRequest("channel");
+    const res = await GET(req);
+    const hit = res.body.results.find(
+      (r: any) => r.title === "Release Channels"
+    );
+    expect(hit).toBeDefined();
+    expect(hit.url).toBe("/docs/hive/operations/release-channels");
+  });
 
-  it('still finds a shared general-section page without the /hive/ segment', async () => {
-    const req = new MockNextRequest('umbrella')
-    const res = await GET(req)
-    const hit = res.body.results.find((r: any) => r.title === 'What is Hive Commons?')
-    expect(hit).toBeDefined()
-    expect(hit.url).toBe('/docs/community/what-is-hive-commons')
-  })
-})
+  it("still finds a shared general-section page without the /hive/ segment", async () => {
+    const req = new MockNextRequest("umbrella");
+    const res = await GET(req);
+    const hit = res.body.results.find(
+      (r: any) => r.title === "What is Hive Commons?"
+    );
+    expect(hit).toBeDefined();
+    expect(hit.url).toBe("/docs/community/what-is-hive-commons");
+  });
+});
diff --git a/src/__tests__/search-route.non-error-throw.test.ts b/src/__tests__/search-route.non-error-throw.test.ts
index 8f5414c..8a2bb9c 100644
--- a/src/__tests__/search-route.non-error-throw.test.ts
+++ b/src/__tests__/search-route.non-error-throw.test.ts
@@ -1,4 +1,4 @@
-import { describe, it, expect, vi, beforeEach } from 'vitest'
+import { describe, it, expect, vi, beforeEach } from "vitest";
 
 /**
  * Coverage for the non-Error branch of the catch handler at
@@ -15,35 +15,37 @@ import { describe, it, expect, vi, beforeEach } from 'vitest'
  * string from `buildPageMap`.
  */
 
-vi.mock('fs', () => ({
+vi.mock("fs", () => ({
   default: {
     existsSync: () => false,
-    readFileSync: () => '',
+    readFileSync: () => "",
   },
-}))
+}));
 
-vi.mock('../app/docs/page-map', () => ({
+vi.mock("../app/docs/page-map", () => ({
   buildPageMap: () => {
     // Deliberately throw a non-Error value to hit the else arm of
     // `error instanceof Error ? error.message : String(error)`.
-    throw 'plain-string-blowup'
+    throw "plain-string-blowup";
   },
-  docsContentPath: '/fake/docs/content',
-  basePath: 'docs',
-}))
+  docsContentPath: "/fake/docs/content",
+  basePath: "docs",
+}));
 
-vi.mock('@/lib/transformMdx', () => ({
+vi.mock("@/lib/transformMdx", () => ({
   convertHtmlScriptsToJsxComments: (content: string) => content,
-}))
+}));
 
 class MockNextRequest {
-  nextUrl: { searchParams: URLSearchParams }
+  nextUrl: { searchParams: URLSearchParams };
   constructor(query: string) {
-    this.nextUrl = { searchParams: new URLSearchParams(query ? `q=${query}` : '') }
+    this.nextUrl = {
+      searchParams: new URLSearchParams(query ? `q=${query}` : ""),
+    };
   }
 }
 
-vi.mock('next/server', () => ({
+vi.mock("next/server", () => ({
   NextRequest: MockNextRequest,
   NextResponse: {
     json: (body: unknown, init?: { status?: number }) => ({
@@ -51,48 +53,53 @@ vi.mock('next/server', () => ({
       status: init?.status || 200,
     }),
   },
-}))
+}));
 
-const errorSpy = { calls: [] as unknown[][] }
+const errorSpy = { calls: [] as unknown[][] };
 
-vi.mock('@/lib/logger', () => ({
+vi.mock("@/lib/logger", () => ({
   logger: {
     error: (...args: unknown[]) => {
-      errorSpy.calls.push(args)
+      errorSpy.calls.push(args);
     },
     info: () => {},
     warn: () => {},
     debug: () => {},
   },
-}))
+}));
 
-vi.mock('@/lib/metrics', () => ({
+vi.mock("@/lib/metrics", () => ({
   recordApiRequest: () => {},
-}))
+}));
 
-let GET: (request: unknown) => Promise<{ status: number; body: { error: string; results: unknown[]; count: number } }>
+let GET: (
+  request: unknown
+) => Promise<{
+  status: number;
+  body: { error: string; results: unknown[]; count: number };
+}>;
 
 beforeEach(async () => {
-  vi.resetModules()
-  errorSpy.calls.length = 0
-  const mod = await import('../app/api/search/route')
-  GET = mod.GET as typeof GET
-})
+  vi.resetModules();
+  errorSpy.calls.length = 0;
+  const mod = await import("../app/api/search/route");
+  GET = mod.GET as typeof GET;
+});
 
-describe('GET /api/search — non-Error throws', () => {
-  it('coerces a non-Error throw via String(error) in the structured log', async () => {
-    const res = await GET(new MockNextRequest('anything'))
+describe("GET /api/search — non-Error throws", () => {
+  it("coerces a non-Error throw via String(error) in the structured log", async () => {
+    const res = await GET(new MockNextRequest("anything"));
 
-    expect(res.status).toBe(500)
-    expect(res.body.error).toBe('Search failed')
-    expect(res.body.results).toEqual([])
-    expect(res.body.count).toBe(0)
+    expect(res.status).toBe(500);
+    expect(res.body.error).toBe("Search failed");
+    expect(res.body.results).toEqual([]);
+    expect(res.body.count).toBe(0);
 
     // The logger should have received the coerced string form, proving the
     // else arm of `error instanceof Error ? ... : String(error)` fired.
-    expect(errorSpy.calls.length).toBe(1)
-    const [msg, meta] = errorSpy.calls[0]
-    expect(msg).toBe('search request failed')
-    expect((meta as { error: string }).error).toBe('plain-string-blowup')
-  })
-})
+    expect(errorSpy.calls.length).toBe(1);
+    const [msg, meta] = errorSpy.calls[0];
+    expect(msg).toBe("search request failed");
+    expect((meta as { error: string }).error).toBe("plain-string-blowup");
+  });
+});
diff --git a/src/__tests__/search-route.sort-comparator.test.ts b/src/__tests__/search-route.sort-comparator.test.ts
index 369b214..7971207 100644
--- a/src/__tests__/search-route.sort-comparator.test.ts
+++ b/src/__tests__/search-route.sort-comparator.test.ts
@@ -1,4 +1,4 @@
-import { describe, it, expect, vi, beforeEach } from 'vitest'
+import { describe, it, expect, vi, beforeEach } from "vitest";
 
 /**
  * Focused branch coverage for the `results.sort()` comparator at
@@ -37,62 +37,67 @@ const { mockRouteMap, mockFiles } = vi.hoisted(() => {
   // fire BOTH the -1 arm (title vs content) AND the +1 arm (content vs title)
   // during at least one pairwise comparison in V8's TimSort.
   const mockRouteMap: Record<string, string> = {
-    'alpha-doc': 'alpha-doc.mdx',
-    'beta-doc': 'beta-doc.mdx',
-    'gamma-doc': 'gamma-doc.mdx',
-    'zulu-doc': 'zulu-doc.mdx',
-  }
+    "alpha-doc": "alpha-doc.mdx",
+    "beta-doc": "beta-doc.mdx",
+    "gamma-doc": "gamma-doc.mdx",
+    "zulu-doc": "zulu-doc.mdx",
+  };
   const mockFiles: Record<string, string> = {
-    'alpha-doc.mdx': '# Alpha Ordering\n\nDiscusses kubestellar tooling in depth.',
-    'beta-doc.mdx': '# Beta Kubestellar Guide\n\nOverview of the beta guide.',
-    'gamma-doc.mdx': '# Gamma Notes\n\nMore kubestellar internals and edge cases.',
-    'zulu-doc.mdx': '# Zulu About Kubestellar\n\nBackground and kubestellar history.',
-  }
-  return { mockRouteMap, mockFiles }
-})
-
-vi.mock('fs', () => ({
+    "alpha-doc.mdx":
+      "# Alpha Ordering\n\nDiscusses kubestellar tooling in depth.",
+    "beta-doc.mdx": "# Beta Kubestellar Guide\n\nOverview of the beta guide.",
+    "gamma-doc.mdx":
+      "# Gamma Notes\n\nMore kubestellar internals and edge cases.",
+    "zulu-doc.mdx":
+      "# Zulu About Kubestellar\n\nBackground and kubestellar history.",
+  };
+  return { mockRouteMap, mockFiles };
+});
+
+vi.mock("fs", () => ({
   default: {
     existsSync: (filePath: string) => {
-      const rel = filePath.replace(/.*\/docs\/content\//, '')
-      return rel in mockFiles
+      const rel = filePath.replace(/.*\/docs\/content\//, "");
+      return rel in mockFiles;
     },
     readFileSync: (filePath: string) => {
-      const rel = filePath.replace(/.*\/docs\/content\//, '')
-      return mockFiles[rel] || ''
+      const rel = filePath.replace(/.*\/docs\/content\//, "");
+      return mockFiles[rel] || "";
     },
   },
-}))
+}));
 
-vi.mock('../app/docs/page-map', () => ({
+vi.mock("../app/docs/page-map", () => ({
   buildPageMap: () => ({ routeMap: mockRouteMap }),
-  docsContentPath: '/fake/docs/content',
-  basePath: 'docs',
-}))
+  docsContentPath: "/fake/docs/content",
+  basePath: "docs",
+}));
 
-vi.mock('@/lib/transformMdx', () => ({
+vi.mock("@/lib/transformMdx", () => ({
   convertHtmlScriptsToJsxComments: (content: string) => content,
-}))
+}));
 
-vi.mock('path', async () => {
-  const actual = await vi.importActual<typeof import('path')>('path')
+vi.mock("path", async () => {
+  const actual = await vi.importActual<typeof import("path")>("path");
   return {
     ...actual,
     default: {
       ...actual,
-      join: (...parts: string[]) => parts.join('/').replace(/\/+/g, '/'),
+      join: (...parts: string[]) => parts.join("/").replace(/\/+/g, "/"),
     },
-  }
-})
+  };
+});
 
 class MockNextRequest {
-  nextUrl: { searchParams: URLSearchParams }
+  nextUrl: { searchParams: URLSearchParams };
   constructor(query: string) {
-    this.nextUrl = { searchParams: new URLSearchParams(query ? `q=${query}` : '') }
+    this.nextUrl = {
+      searchParams: new URLSearchParams(query ? `q=${query}` : ""),
+    };
   }
 }
 
-vi.mock('next/server', () => ({
+vi.mock("next/server", () => ({
   NextRequest: MockNextRequest,
   NextResponse: {
     json: (body: unknown, init?: { status?: number }) => ({
@@ -100,54 +105,56 @@ vi.mock('next/server', () => ({
       status: init?.status || 200,
     }),
   },
-}))
+}));
 
-let GET: (request: any) => Promise<any>
+let GET: (request: any) => Promise<any>;
 
 beforeEach(async () => {
-  vi.resetModules()
-  const mod = await import('../app/api/search/route')
-  GET = mod.GET
-})
+  vi.resetModules();
+  const mod = await import("../app/api/search/route");
+  GET = mod.GET;
+});
 
-describe('GET /api/search — sort comparator title-vs-content branches', () => {
-  it('places title matches ahead of content matches and orders each group alphabetically', async () => {
-    const req = new MockNextRequest('kubestellar')
-    const res = await GET(req)
+describe("GET /api/search — sort comparator title-vs-content branches", () => {
+  it("places title matches ahead of content matches and orders each group alphabetically", async () => {
+    const req = new MockNextRequest("kubestellar");
+    const res = await GET(req);
 
     // All four fixtures match somehow — sanity check.
-    expect(res.body.results).toHaveLength(4)
+    expect(res.body.results).toHaveLength(4);
 
     // Extract just what we care about: title + matchType, in reported order.
-    const observed = res.body.results.map((r: { title: string; matchType: string }) => ({
-      title: r.title,
-      matchType: r.matchType,
-    }))
+    const observed = res.body.results.map(
+      (r: { title: string; matchType: string }) => ({
+        title: r.title,
+        matchType: r.matchType,
+      })
+    );
 
     // Title matches (Beta, Zulu) — alphabetical within group — must precede
     // content matches (Alpha, Gamma), also alphabetical within group.
     expect(observed).toEqual([
-      { title: 'Beta Kubestellar Guide', matchType: 'title' },
-      { title: 'Zulu About Kubestellar', matchType: 'title' },
-      { title: 'Alpha Ordering', matchType: 'content' },
-      { title: 'Gamma Notes', matchType: 'content' },
-    ])
-  })
-
-  it('regression guard: a content match with an alphabetically-earlier title still ranks below a title match', async () => {
+      { title: "Beta Kubestellar Guide", matchType: "title" },
+      { title: "Zulu About Kubestellar", matchType: "title" },
+      { title: "Alpha Ordering", matchType: "content" },
+      { title: "Gamma Notes", matchType: "content" },
+    ]);
+  });
+
+  it("regression guard: a content match with an alphabetically-earlier title still ranks below a title match", async () => {
     // "Alpha Ordering" (content match) sorts alphabetically BEFORE
     // "Beta Kubestellar Guide" (title match). If the comparator's +1 arm
     // regressed to 0 (or -1), Alpha would leak to the top.
-    const req = new MockNextRequest('kubestellar')
-    const res = await GET(req)
+    const req = new MockNextRequest("kubestellar");
+    const res = await GET(req);
 
-    const firstTitle = res.body.results[0].title
+    const firstTitle = res.body.results[0].title;
     const alphaIdx = res.body.results.findIndex(
-      (r: { title: string }) => r.title === 'Alpha Ordering'
-    )
+      (r: { title: string }) => r.title === "Alpha Ordering"
+    );
 
-    expect(firstTitle).not.toBe('Alpha Ordering')
+    expect(firstTitle).not.toBe("Alpha Ordering");
     // Alpha (content) must come after both title matches.
-    expect(alphaIdx).toBeGreaterThanOrEqual(2)
-  })
-})
+    expect(alphaIdx).toBeGreaterThanOrEqual(2);
+  });
+});
diff --git a/src/__tests__/search-route.test.ts b/src/__tests__/search-route.test.ts
index 80c1560..75e09ee 100644
--- a/src/__tests__/search-route.test.ts
+++ b/src/__tests__/search-route.test.ts
@@ -1,4 +1,4 @@
-import { describe, it, expect, vi, beforeEach } from 'vitest'
+import { describe, it, expect, vi, beforeEach } from "vitest";
 
 /**
  * Unit tests for the /api/search route handler.
@@ -12,69 +12,71 @@ import { describe, it, expect, vi, beforeEach } from 'vitest'
 
 const { mockRouteMap, mockFiles } = vi.hoisted(() => {
   const mockRouteMap: Record<string, string> = {
-    'getting-started/install': 'getting-started/install.mdx',
-    'guides/upgrade': 'guides/upgrade.mdx',
-    'reference/api': 'reference/api.mdx',
-  }
+    "getting-started/install": "getting-started/install.mdx",
+    "guides/upgrade": "guides/upgrade.mdx",
+    "reference/api": "reference/api.mdx",
+  };
 
   const mockFiles: Record<string, string> = {
-    'getting-started/install.mdx':
-      '# Installation Guide\n\nInstall KubeStellar using helm:\n\n```bash\nhelm install ks kubestellar/kubestellar\n```\n\nAfter installation, verify the deployment.',
-    'guides/upgrade.mdx':
-      '# Upgrade Guide\n\nTo upgrade your cluster, run the upgrade command.\n\n## Prerequisites\n\nEnsure you have backed up your data.',
-    'reference/api.mdx':
-      '# API Reference\n\nThe KubeStellar API provides endpoints for cluster management.\n\n## Authentication\n\nAll requests require a valid bearer token.',
-  }
+    "getting-started/install.mdx":
+      "# Installation Guide\n\nInstall KubeStellar using helm:\n\n```bash\nhelm install ks kubestellar/kubestellar\n```\n\nAfter installation, verify the deployment.",
+    "guides/upgrade.mdx":
+      "# Upgrade Guide\n\nTo upgrade your cluster, run the upgrade command.\n\n## Prerequisites\n\nEnsure you have backed up your data.",
+    "reference/api.mdx":
+      "# API Reference\n\nThe KubeStellar API provides endpoints for cluster management.\n\n## Authentication\n\nAll requests require a valid bearer token.",
+  };
 
-  return { mockRouteMap, mockFiles }
-})
+  return { mockRouteMap, mockFiles };
+});
 
 // ─── Mocks ───────────────────────────────────────────────────────────
 
-vi.mock('fs', () => ({
+vi.mock("fs", () => ({
   default: {
     existsSync: (filePath: string) => {
-      const rel = filePath.replace(/.*\/docs\/content\//, '')
-      return rel in mockFiles
+      const rel = filePath.replace(/.*\/docs\/content\//, "");
+      return rel in mockFiles;
     },
     readFileSync: (filePath: string) => {
-      const rel = filePath.replace(/.*\/docs\/content\//, '')
-      return mockFiles[rel] || ''
+      const rel = filePath.replace(/.*\/docs\/content\//, "");
+      return mockFiles[rel] || "";
     },
   },
-}))
+}));
 
 // Path from src/__tests__/ to src/app/docs/page-map is ../app/docs/page-map
-vi.mock('../app/docs/page-map', () => ({
+vi.mock("../app/docs/page-map", () => ({
   buildPageMap: () => ({ routeMap: mockRouteMap }),
-  docsContentPath: '/fake/docs/content',
-  basePath: 'docs',
-}))
+  docsContentPath: "/fake/docs/content",
+  basePath: "docs",
+}));
 
-vi.mock('@/lib/transformMdx', () => ({
+vi.mock("@/lib/transformMdx", () => ({
   convertHtmlScriptsToJsxComments: (content: string) => content,
-}))
+}));
 
-vi.mock('path', async () => {
-  const actual = await vi.importActual<typeof import('path')>('path')
+vi.mock("path", async () => {
+  const actual = await vi.importActual<typeof import("path")>("path");
   return {
     ...actual,
     default: {
       ...actual,
-      join: (...parts: string[]) => parts.join('/').replace(/\/+/g, '/'),
+      join: (...parts: string[]) => parts.join("/").replace(/\/+/g, "/"),
     },
-  }
-})
+  };
+});
 
 // Mock NextRequest/NextResponse
 class MockNextRequest {
-  nextUrl: { searchParams: URLSearchParams }
+  nextUrl: { searchParams: URLSearchParams };
   constructor(query: string) {
-    this.nextUrl = { searchParams: new URLSearchParams(query ? `q=${query}` : '') }
+    this.nextUrl = {
+      searchParams: new URLSearchParams(query ? `q=${query}` : ""),
+    };
   }
 }
 
-vi.mock('next/server', () => ({
+vi.mock("next/server", () => ({
   NextRequest: MockNextRequest,
   NextResponse: {
     json: (body: unknown, init?: { status?: number }) => ({
@@ -82,89 +84,93 @@ vi.mock('next/server', () => ({
       status: init?.status || 200,
     }),
   },
-}))
+}));
 
 // ─── Import after mocks ──────────────────────────────────────────────
 
 // We need to import the module after mocks are set up
-let GET: (request: any) => Promise<any>
+let GET: (request: any) => Promise<any>;
 
 beforeEach(async () => {
-  vi.resetModules()
-  const mod = await import('../app/api/search/route')
-  GET = mod.GET
-})
+  vi.resetModules();
+  const mod = await import("../app/api/search/route");
+  GET = mod.GET;
+});
 
 // ─── Tests ───────────────────────────────────────────────────────────
 
-describe('GET /api/search', () => {
-  it('returns empty results for empty query', async () => {
-    const req = new MockNextRequest('')
-    const res = await GET(req)
-    expect(res.body.results).toEqual([])
-    expect(res.body.count).toBe(0)
-  })
-
-  it('returns matching results for a valid query', async () => {
-    const req = new MockNextRequest('install')
-    const res = await GET(req)
-    expect(res.body.count).toBeGreaterThan(0)
-    const titles = res.body.results.map((r: any) => r.title)
-    expect(titles).toContain('Installation Guide')
-  })
-
-  it('prioritizes title matches over content matches', async () => {
-    const req = new MockNextRequest('upgrade')
-    const res = await GET(req)
-    expect(res.body.results.length).toBeGreaterThan(0)
+describe("GET /api/search", () => {
+  it("returns empty results for empty query", async () => {
+    const req = new MockNextRequest("");
+    const res = await GET(req);
+    expect(res.body.results).toEqual([]);
+    expect(res.body.count).toBe(0);
+  });
+
+  it("returns matching results for a valid query", async () => {
+    const req = new MockNextRequest("install");
+    const res = await GET(req);
+    expect(res.body.count).toBeGreaterThan(0);
+    const titles = res.body.results.map((r: any) => r.title);
+    expect(titles).toContain("Installation Guide");
+  });
+
+  it("prioritizes title matches over content matches", async () => {
+    const req = new MockNextRequest("upgrade");
+    const res = await GET(req);
+    expect(res.body.results.length).toBeGreaterThan(0);
     // "Upgrade Guide" has "upgrade" in title, should come first
-    expect(res.body.results[0].matchType).toBe('title')
-  })
-
-  it('limits results to 20', async () => {
-    const req = new MockNextRequest('the')
-    const res = await GET(req)
-    expect(res.body.results.length).toBeLessThanOrEqual(20)
-  })
-
-  it('generates correct URLs from route keys', async () => {
-    const req = new MockNextRequest('api')
-    const res = await GET(req)
-    const apiResult = res.body.results.find((r: any) => r.title === 'API Reference')
-    expect(apiResult).toBeDefined()
-    expect(apiResult.url).toBe('/docs/reference/api')
-  })
-
-  it('generates highlighted snippets with <mark> tags', async () => {
-    const req = new MockNextRequest('cluster')
-    const res = await GET(req)
-    const match = res.body.results.find((r: any) => r.matchType === 'content')
+    expect(res.body.results[0].matchType).toBe("title");
+  });
+
+  it("limits results to 20", async () => {
+    const req = new MockNextRequest("the");
+    const res = await GET(req);
+    expect(res.body.results.length).toBeLessThanOrEqual(20);
+  });
+
+  it("generates correct URLs from route keys", async () => {
+    const req = new MockNextRequest("api");
+    const res = await GET(req);
+    const apiResult = res.body.results.find(
+      (r: any) => r.title === "API Reference"
+    );
+    expect(apiResult).toBeDefined();
+    expect(apiResult.url).toBe("/docs/reference/api");
+  });
+
+  it("generates highlighted snippets with <mark> tags", async () => {
+    const req = new MockNextRequest("cluster");
+    const res = await GET(req);
+    const match = res.body.results.find((r: any) => r.matchType === "content");
     if (match) {
-      expect(match.highlightedSnippet).toContain('<mark>')
+      expect(match.highlightedSnippet).toContain("<mark>");
     }
-  })
+  });
 
-  it('HTML-encodes snippet content to prevent XSS', async () => {
-    const req = new MockNextRequest('helm')
-    const res = await GET(req)
+  it("HTML-encodes snippet content to prevent XSS", async () => {
+    const req = new MockNextRequest("helm");
+    const res = await GET(req);
     // Code blocks are stripped, but if any < remains it should be encoded
     for (const r of res.body.results) {
       // highlightedSnippet should only contain <mark> tags, no raw HTML
-      const withoutMark = r.highlightedSnippet.replace(/<\/?mark>/g, '')
-      expect(withoutMark).not.toMatch(/<[a-z]/)
+      const withoutMark = r.highlightedSnippet.replace(/<\/?mark>/g, "");
+      expect(withoutMark).not.toMatch(/<[a-z]/);
     }
-  })
-
-  it('extracts category from first path segment', async () => {
-    const req = new MockNextRequest('install')
-    const res = await GET(req)
-    const installResult = res.body.results.find((r: any) => r.title === 'Installation Guide')
-    expect(installResult?.category).toBe('Getting Started')
-  })
-
-  it('is case-insensitive', async () => {
-    const req = new MockNextRequest('KUBESTELLAR')
-    const res = await GET(req)
-    expect(res.body.count).toBeGreaterThan(0)
-  })
-})
+  });
+
+  it("extracts category from first path segment", async () => {
+    const req = new MockNextRequest("install");
+    const res = await GET(req);
+    const installResult = res.body.results.find(
+      (r: any) => r.title === "Installation Guide"
+    );
+    expect(installResult?.category).toBe("Getting Started");
+  });
+
+  it("is case-insensitive", async () => {
+    const req = new MockNextRequest("KUBESTELLAR");
+    const res = await GET(req);
+    expect(res.body.count).toBeGreaterThan(0);
+  });
+});
diff --git a/src/__tests__/search-route.title-only-long.test.ts b/src/__tests__/search-route.title-only-long.test.ts
index 3bce9bc..64c294b 100644
--- a/src/__tests__/search-route.title-only-long.test.ts
+++ b/src/__tests__/search-route.title-only-long.test.ts
@@ -1,4 +1,4 @@
-import { describe, it, expect, vi, beforeEach } from 'vitest'
+import { describe, it, expect, vi, beforeEach } from "vitest";
 
 /**
  * Additional branch coverage for /api/search/route.ts line 146:
@@ -13,60 +13,60 @@ const { mockRouteMap, mockFiles } = vi.hoisted(() => {
   // a query on "zebras" produces a title-only match (fallback title
   // derived from the routeKey basename "zebras" → "Zebras") on a body
   // > 140 characters.
-  const longBody = 'z '.repeat(300)
+  const longBody = "z ".repeat(300);
   return {
-    mockRouteMap: { 'guides/zebras': 'guides/zebras.mdx' } as Record<
+    mockRouteMap: { "guides/zebras": "guides/zebras.mdx" } as Record<
       string,
       string
     >,
-    mockFiles: { 'guides/zebras.mdx': longBody } as Record<string, string>,
-  }
-})
+    mockFiles: { "guides/zebras.mdx": longBody } as Record<string, string>,
+  };
+});
 
-vi.mock('fs', () => ({
+vi.mock("fs", () => ({
   default: {
     existsSync: (p: string) => {
-      const rel = p.replace(/.*\/docs\/content\//, '')
-      return rel in mockFiles
+      const rel = p.replace(/.*\/docs\/content\//, "");
+      return rel in mockFiles;
     },
     readFileSync: (p: string) => {
-      const rel = p.replace(/.*\/docs\/content\//, '')
-      return mockFiles[rel] || ''
+      const rel = p.replace(/.*\/docs\/content\//, "");
+      return mockFiles[rel] || "";
     },
   },
-}))
+}));
 
-vi.mock('../app/docs/page-map', () => ({
+vi.mock("../app/docs/page-map", () => ({
   buildPageMap: () => ({ routeMap: mockRouteMap }),
-  docsContentPath: '/fake/docs/content',
-  basePath: 'docs',
-}))
+  docsContentPath: "/fake/docs/content",
+  basePath: "docs",
+}));
 
-vi.mock('@/lib/transformMdx', () => ({
+vi.mock("@/lib/transformMdx", () => ({
   convertHtmlScriptsToJsxComments: (content: string) => content,
-}))
+}));
 
-vi.mock('path', async () => {
-  const actual = await vi.importActual<typeof import('path')>('path')
+vi.mock("path", async () => {
+  const actual = await vi.importActual<typeof import("path")>("path");
   return {
     ...actual,
     default: {
       ...actual,
-      join: (...parts: string[]) => parts.join('/').replace(/\/+/g, '/'),
+      join: (...parts: string[]) => parts.join("/").replace(/\/+/g, "/"),
     },
-  }
-})
+  };
+});
 
 class MockNextRequest {
-  nextUrl: { searchParams: URLSearchParams }
+  nextUrl: { searchParams: URLSearchParams };
   constructor(query: string) {
     this.nextUrl = {
-      searchParams: new URLSearchParams(query ? `q=${query}` : ''),
-    }
+      searchParams: new URLSearchParams(query ? `q=${query}` : ""),
+    };
   }
 }
 
-vi.mock('next/server', () => ({
+vi.mock("next/server", () => ({
   NextRequest: MockNextRequest,
   NextResponse: {
     json: (body: unknown, init?: { status?: number }) => ({
@@ -74,29 +74,29 @@ vi.mock('next/server', () => ({
       status: init?.status || 200,
     }),
   },
-}))
+}));
 
 describe('GET /api/search — title-only match on long body appends "..."', () => {
-  beforeEach(() => vi.resetModules())
+  beforeEach(() => vi.resetModules());
 
   it('emits snippet = first 140 chars + "..." when body length > 140', async () => {
-    const { GET } = await import('../app/api/search/route')
-    const req = new MockNextRequest('zebras')
+    const { GET } = await import("../app/api/search/route");
+    const req = new MockNextRequest("zebras");
     const res = (await GET(req as any)) as unknown as {
       body: {
         results: Array<{
-          title: string
-          matchType: string
-          snippet: string
-        }>
-      }
-    }
+          title: string;
+          matchType: string;
+          snippet: string;
+        }>;
+      };
+    };
 
-    const hit = res.body.results.find((r) => r.title === 'Zebras')
-    expect(hit).toBeDefined()
-    expect(hit!.matchType).toBe('title')
+    const hit = res.body.results.find(r => r.title === "Zebras");
+    expect(hit).toBeDefined();
+    expect(hit!.matchType).toBe("title");
     // Body > 140 chars → ternary short-circuits to '...' suffix.
-    expect(hit!.snippet.endsWith('...')).toBe(true)
-    expect(hit!.snippet.slice(0, 140).length).toBe(140)
-  })
-})
+    expect(hit!.snippet.endsWith("...")).toBe(true);
+    expect(hit!.snippet.slice(0, 140).length).toBe(140);
+  });
+});
diff --git a/src/__tests__/sitemap.test.ts b/src/__tests__/sitemap.test.ts
index 83417a2..0b4adf9 100644
--- a/src/__tests__/sitemap.test.ts
+++ b/src/__tests__/sitemap.test.ts
@@ -1,108 +1,119 @@
-import { afterEach, describe, expect, it, vi } from 'vitest'
-import fs from 'fs'
-import path from 'path'
-import sitemap from '../app/sitemap'
-
-const SITE_URL = 'https://docs.hivecommons.dev'
-
-describe('sitemap', () => {
-  it('uses absolute production URLs for marketing and docs landing routes', () => {
-    const urls = sitemap().map((entry) => entry.url)
-
-    expect(urls).toContain(SITE_URL)
-    expect(urls).toContain(`${SITE_URL}/en`)
-    expect(urls).toContain(`${SITE_URL}/docs`)
-    expect(urls.every((url) => url.startsWith(`${SITE_URL}/` ) || url === SITE_URL)).toBe(true)
-  })
-
-  it('includes project roots and markdown-backed docs routes', () => {
-    const urls = sitemap().map((entry) => entry.url)
-
-    expect(urls).toEqual(expect.arrayContaining([
-      `${SITE_URL}/docs/hive`,
-      `${SITE_URL}/docs/hive/architecture`,
-      `${SITE_URL}/docs/hive/adr/0001-record-architecture-decisions`,
-      `${SITE_URL}/docs/hotshot`,
-      `${SITE_URL}/docs/hotshot/windows`,
-      `${SITE_URL}/docs/pluk`,
-      `${SITE_URL}/docs/rationguard`,
-      `${SITE_URL}/docs/promptargs`,
-      `${SITE_URL}/docs/dibs`,
-      `${SITE_URL}/docs/spektacular`,
-      `${SITE_URL}/docs/spektacular/getting-started`,
-    ]))
-  })
-
-  it('does not include shared partials or image assets as docs pages', () => {
-    const urls = sitemap().map((entry) => entry.url)
-
-    expect(urls).not.toContain(`${SITE_URL}/docs/common-subs/coming-soon`)
-    expect(urls.some((url) => url.includes('/common-subs/'))).toBe(false)
-    expect(urls.some((url) => url.includes('/images/'))).toBe(false)
-  })
-})
-
-
-describe('sitemap generated from fixture content', () => {
-  const realCwd = process.cwd()
-  let fixtureRoot: string | undefined
-
-  function write(relPath: string, content = '# stub\n') {
-    if (!fixtureRoot) throw new Error('fixtureRoot not initialized')
-    const full = path.join(fixtureRoot, relPath)
-    fs.mkdirSync(path.dirname(full), { recursive: true })
-    fs.writeFileSync(full, content)
-    return full
+import { afterEach, describe, expect, it, vi } from "vitest";
+import fs from "fs";
+import path from "path";
+import sitemap from "../app/sitemap";
+
+const SITE_URL = "https://docs.hivecommons.dev";
+
+describe("sitemap", () => {
+  it("uses absolute production URLs for marketing and docs landing routes", () => {
+    const urls = sitemap().map(entry => entry.url);
+
+    expect(urls).toContain(SITE_URL);
+    expect(urls).toContain(`${SITE_URL}/en`);
+    expect(urls).toContain(`${SITE_URL}/docs`);
+    expect(
+      urls.every(url => url.startsWith(`${SITE_URL}/`) || url === SITE_URL)
+    ).toBe(true);
+  });
+
+  it("includes project roots and markdown-backed docs routes", () => {
+    const urls = sitemap().map(entry => entry.url);
+
+    expect(urls).toEqual(
+      expect.arrayContaining([
+        `${SITE_URL}/docs/hive`,
+        `${SITE_URL}/docs/hive/architecture`,
+        `${SITE_URL}/docs/hive/adr/0001-record-architecture-decisions`,
+        `${SITE_URL}/docs/hotshot`,
+        `${SITE_URL}/docs/hotshot/windows`,
+        `${SITE_URL}/docs/pluk`,
+        `${SITE_URL}/docs/rationguard`,
+        `${SITE_URL}/docs/promptargs`,
+        `${SITE_URL}/docs/dibs`,
+        `${SITE_URL}/docs/spektacular`,
+        `${SITE_URL}/docs/spektacular/getting-started`,
+      ])
+    );
+  });
+
+  it("does not include shared partials or image assets as docs pages", () => {
+    const urls = sitemap().map(entry => entry.url);
+
+    expect(urls).not.toContain(`${SITE_URL}/docs/common-subs/coming-soon`);
+    expect(urls.some(url => url.includes("/common-subs/"))).toBe(false);
+    expect(urls.some(url => url.includes("/images/"))).toBe(false);
+  });
+});
+
+describe("sitemap generated from fixture content", () => {
+  const realCwd = process.cwd();
+  let fixtureRoot: string | undefined;
+
+  function write(relPath: string, content = "# stub\n") {
+    if (!fixtureRoot) throw new Error("fixtureRoot not initialized");
+    const full = path.join(fixtureRoot, relPath);
+    fs.mkdirSync(path.dirname(full), { recursive: true });
+    fs.writeFileSync(full, content);
+    return full;
   }
 
   afterEach(() => {
-    vi.restoreAllMocks()
+    vi.restoreAllMocks();
     if (fixtureRoot) {
-      fs.rmSync(fixtureRoot, { recursive: true, force: true })
-      fixtureRoot = undefined
+      fs.rmSync(fixtureRoot, { recursive: true, force: true });
+      fixtureRoot = undefined;
     }
-  })
-
-  it('maps markdown files to routes, priorities, frequencies, and mtimes', () => {
-    fixtureRoot = fs.mkdtempSync(path.join(realCwd, '.sitemap-fixture-'))
-    const setupPath = write('docs/content/hive/guides/setup.md')
-    write('docs/content/hive/guides/advanced/scaling.mdx')
-    write('docs/content/pluk/cli/index.md')
-    vi.spyOn(process, 'cwd').mockReturnValue(fixtureRoot)
-
-    const entries = sitemap()
-    const byUrl = new Map(entries.map((entry) => [entry.url, entry]))
-
-    expect(byUrl.get(SITE_URL)?.priority).toBe(1.0)
-    expect(byUrl.get(`${SITE_URL}/en`)?.changeFrequency).toBe('monthly')
-    expect(byUrl.get(`${SITE_URL}/docs`)?.priority).toBe(0.9)
-    expect(byUrl.get(`${SITE_URL}/docs/hive`)?.priority).toBe(0.9)
-    expect(byUrl.get(`${SITE_URL}/docs/hive/guides/setup`)?.priority).toBe(0.7)
-    expect(byUrl.get(`${SITE_URL}/docs/hive/guides/setup`)?.changeFrequency).toBe('weekly')
-    expect(byUrl.get(`${SITE_URL}/docs/hive/guides/setup`)?.lastModified).toEqual(fs.statSync(setupPath).mtime)
-    expect(byUrl.has(`${SITE_URL}/docs/hive/guides/advanced/scaling`)).toBe(true)
-    expect(byUrl.has(`${SITE_URL}/docs/pluk/cli`)).toBe(true)
-    expect(byUrl.has(`${SITE_URL}/docs/pluk/cli/index`)).toBe(false)
-  })
-
-  it('omits generated routes for missing content while retaining project roots', () => {
-    fixtureRoot = fs.mkdtempSync(path.join(realCwd, '.sitemap-empty-'))
-    vi.spyOn(process, 'cwd').mockReturnValue(fixtureRoot)
-
-    const entries = sitemap()
-
-    expect(entries).toHaveLength(10)
-    expect(entries.map((entry) => entry.url)).toEqual(expect.arrayContaining([
-      SITE_URL,
-      `${SITE_URL}/en`,
-      `${SITE_URL}/docs`,
-      `${SITE_URL}/docs/hive`,
-      `${SITE_URL}/docs/hotshot`,
-      `${SITE_URL}/docs/pluk`,
-      `${SITE_URL}/docs/rationguard`,
-      `${SITE_URL}/docs/promptargs`,
-      `${SITE_URL}/docs/dibs`,
-      `${SITE_URL}/docs/spektacular`,
-    ]))
-  })
-})
+  });
+
+  it("maps markdown files to routes, priorities, frequencies, and mtimes", () => {
+    fixtureRoot = fs.mkdtempSync(path.join(realCwd, ".sitemap-fixture-"));
+    const setupPath = write("docs/content/hive/guides/setup.md");
+    write("docs/content/hive/guides/advanced/scaling.mdx");
+    write("docs/content/pluk/cli/index.md");
+    vi.spyOn(process, "cwd").mockReturnValue(fixtureRoot);
+
+    const entries = sitemap();
+    const byUrl = new Map(entries.map(entry => [entry.url, entry]));
+
+    expect(byUrl.get(SITE_URL)?.priority).toBe(1.0);
+    expect(byUrl.get(`${SITE_URL}/en`)?.changeFrequency).toBe("monthly");
+    expect(byUrl.get(`${SITE_URL}/docs`)?.priority).toBe(0.9);
+    expect(byUrl.get(`${SITE_URL}/docs/hive`)?.priority).toBe(0.9);
+    expect(byUrl.get(`${SITE_URL}/docs/hive/guides/setup`)?.priority).toBe(0.7);
+    expect(
+      byUrl.get(`${SITE_URL}/docs/hive/guides/setup`)?.changeFrequency
+    ).toBe("weekly");
+    expect(
+      byUrl.get(`${SITE_URL}/docs/hive/guides/setup`)?.lastModified
+    ).toEqual(fs.statSync(setupPath).mtime);
+    expect(byUrl.has(`${SITE_URL}/docs/hive/guides/advanced/scaling`)).toBe(
+      true
+    );
+    expect(byUrl.has(`${SITE_URL}/docs/pluk/cli`)).toBe(true);
+    expect(byUrl.has(`${SITE_URL}/docs/pluk/cli/index`)).toBe(false);
+  });
+
+  it("omits generated routes for missing content while retaining project roots", () => {
+    fixtureRoot = fs.mkdtempSync(path.join(realCwd, ".sitemap-empty-"));
+    vi.spyOn(process, "cwd").mockReturnValue(fixtureRoot);
+
+    const entries = sitemap();
+
+    expect(entries).toHaveLength(10);
+    expect(entries.map(entry => entry.url)).toEqual(
+      expect.arrayContaining([
+        SITE_URL,
+        `${SITE_URL}/en`,
+        `${SITE_URL}/docs`,
+        `${SITE_URL}/docs/hive`,
+        `${SITE_URL}/docs/hotshot`,
+        `${SITE_URL}/docs/pluk`,
+        `${SITE_URL}/docs/rationguard`,
+        `${SITE_URL}/docs/promptargs`,
+        `${SITE_URL}/docs/dibs`,
+        `${SITE_URL}/docs/spektacular`,
+      ])
+    );
+  });
+});
diff --git a/src/__tests__/transformMdx.escaped-bracket-fallback.test.ts b/src/__tests__/transformMdx.escaped-bracket-fallback.test.ts
index 1ea4358..3ea11a4 100644
--- a/src/__tests__/transformMdx.escaped-bracket-fallback.test.ts
+++ b/src/__tests__/transformMdx.escaped-bracket-fallback.test.ts
@@ -1,5 +1,5 @@
-import { describe, it, expect } from 'vitest'
-import { convertHtmlScriptsToJsxComments } from '@/lib/transformMdx'
+import { describe, it, expect } from "vitest";
+import { convertHtmlScriptsToJsxComments } from "@/lib/transformMdx";
 
 // Covers the previously-uncovered "no-hyphen / no-underscore
 // backslash-escaped bracket" fallback branch in transformMdx
@@ -18,34 +18,34 @@ import { convertHtmlScriptsToJsxComments } from '@/lib/transformMdx'
 // appear in the same input string; the coverage report explicitly
 // flagged 128 as uncovered.
 
-describe('convertHtmlScriptsToJsxComments — backslash-escaped bracket fallback', () => {
-  it('escapes a bare backslash-terminated open tag with no hyphen/underscore', () => {
+describe("convertHtmlScriptsToJsxComments — backslash-escaped bracket fallback", () => {
+  it("escapes a bare backslash-terminated open tag with no hyphen/underscore", () => {
     // `<foo\>` — matches the line-128 fallback, not the
     // hyphenated-name arm on line 120.
-    const out = convertHtmlScriptsToJsxComments('prefix <foo\\> suffix')
-    expect(out).toContain('&lt;foo&gt;')
-    expect(out).not.toContain('<foo')
-  })
+    const out = convertHtmlScriptsToJsxComments("prefix <foo\\> suffix");
+    expect(out).toContain("&lt;foo&gt;");
+    expect(out).not.toContain("<foo");
+  });
 
-  it('escapes a bare backslash-terminated close tag with no hyphen/underscore', () => {
+  it("escapes a bare backslash-terminated close tag with no hyphen/underscore", () => {
     // `</bar\>` — the mirror close-tag fallback on line 129.
-    const out = convertHtmlScriptsToJsxComments('a </bar\\> b')
-    expect(out).toContain('&lt;/bar&gt;')
-    expect(out).not.toContain('</bar')
-  })
+    const out = convertHtmlScriptsToJsxComments("a </bar\\> b");
+    expect(out).toContain("&lt;/bar&gt;");
+    expect(out).not.toContain("</bar");
+  });
 
-  it('leaves an unescaped bare `<foo>` alone (no backslash to trigger the arm)', () => {
+  it("leaves an unescaped bare `<foo>` alone (no backslash to trigger the arm)", () => {
     // Sanity: `<foo>` without the trailing backslash must NOT be
     // rewritten by this fallback — otherwise the arm is over-broad.
     // (Downstream arms may still transform it, but the specific
     // line-128 pattern should not fire for backslash-less input.)
-    const out = convertHtmlScriptsToJsxComments('literal <foo>bar</foo>')
+    const out = convertHtmlScriptsToJsxComments("literal <foo>bar</foo>");
     // The output may or may not contain `<foo>` verbatim depending
     // on other passes, but it MUST NOT contain the &lt;foo&gt;
     // escape produced only by the backslash-terminated fallback.
     // Assert instead that the character sequence `foo\` — which
     // is what the fallback would leave behind if it misfired —
     // is absent.
-    expect(out).not.toContain('foo\\')
-  })
-})
+    expect(out).not.toContain("foo\\");
+  });
+});
diff --git a/src/__tests__/transformMdx.escaped-close.test.ts b/src/__tests__/transformMdx.escaped-close.test.ts
index 463aab5..dd12e17 100644
--- a/src/__tests__/transformMdx.escaped-close.test.ts
+++ b/src/__tests__/transformMdx.escaped-close.test.ts
@@ -1,5 +1,5 @@
-import { describe, it, expect } from 'vitest'
-import { convertHtmlScriptsToJsxComments } from '@/lib/transformMdx'
+import { describe, it, expect } from "vitest";
+import { convertHtmlScriptsToJsxComments } from "@/lib/transformMdx";
 
 // Regression guard for the escaped-closing-tag path in transformMdx.ts.
 //
@@ -7,21 +7,21 @@ import { convertHtmlScriptsToJsxComments } from '@/lib/transformMdx'
 // not try to parse it as a JSX closing element. That rewrite is done by the single
 // `<([^>\s]+)\\>` branch, whose greedy character class also accepts a leading slash —
 // there is deliberately no separate closing-tag branch, because it would be dead.
-describe('convertHtmlScriptsToJsxComments — escaped closing tag', () => {
-  it('escapes a backslash-terminated closing tag with no hyphen/underscore', () => {
-    const input = '<p>keep</p></foo\\>tail'
-    const result = convertHtmlScriptsToJsxComments(input)
-    expect(result).toContain('&lt;/foo&gt;')
-    expect(result).not.toContain('</foo\\>')
-    expect(result).toContain('tail')
-  })
+describe("convertHtmlScriptsToJsxComments — escaped closing tag", () => {
+  it("escapes a backslash-terminated closing tag with no hyphen/underscore", () => {
+    const input = "<p>keep</p></foo\\>tail";
+    const result = convertHtmlScriptsToJsxComments(input);
+    expect(result).toContain("&lt;/foo&gt;");
+    expect(result).not.toContain("</foo\\>");
+    expect(result).toContain("tail");
+  });
 
-  it('handles multiple escaped closing tags in the same input', () => {
-    const input = '</alpha\\> and </beta\\>'
-    const result = convertHtmlScriptsToJsxComments(input)
-    expect(result).toContain('&lt;/alpha&gt;')
-    expect(result).toContain('&lt;/beta&gt;')
-  })
+  it("handles multiple escaped closing tags in the same input", () => {
+    const input = "</alpha\\> and </beta\\>";
+    const result = convertHtmlScriptsToJsxComments(input);
+    expect(result).toContain("&lt;/alpha&gt;");
+    expect(result).toContain("&lt;/beta&gt;");
+  });
 
   // Differential guard. The two tests above pass under EITHER of these shapes:
   //
@@ -33,9 +33,9 @@ describe('convertHtmlScriptsToJsxComments — escaped closing tag', () => {
   // closing-only `[^>\s]+` cannot match it and an opening-only branch rejects the
   // leading slash — it would escape the pipeline unescaped. The single greedy branch
   // captures it as `/` and escapes it.
-  it('escapes an empty-named escaped closing tag', () => {
-    const result = convertHtmlScriptsToJsxComments('</\\>')
-    expect(result).toBe('&lt;/&gt;')
-    expect(result).not.toContain('</\\>')
-  })
-})
+  it("escapes an empty-named escaped closing tag", () => {
+    const result = convertHtmlScriptsToJsxComments("</\\>");
+    expect(result).toBe("&lt;/&gt;");
+    expect(result).not.toContain("</\\>");
+  });
+});
diff --git a/src/__tests__/transformMdx.lt-paren.test.ts b/src/__tests__/transformMdx.lt-paren.test.ts
index 4209a5a..bda717e 100644
--- a/src/__tests__/transformMdx.lt-paren.test.ts
+++ b/src/__tests__/transformMdx.lt-paren.test.ts
@@ -1,5 +1,5 @@
-import { describe, it, expect } from 'vitest'
-import { convertHtmlScriptsToJsxComments } from '@/lib/transformMdx'
+import { describe, it, expect } from "vitest";
+import { convertHtmlScriptsToJsxComments } from "@/lib/transformMdx";
 
 /**
  * transformMdx line 128 explicitly rewrites `<(` to `&lt;(`.
@@ -9,23 +9,27 @@ import { convertHtmlScriptsToJsxComments } from '@/lib/transformMdx'
  * doc render. Guarding the rewrite catches an accidental regex-order swap
  * that would delete or corrupt this branch.
  */
-describe('convertHtmlScriptsToJsxComments — <( escape (line 128)', () => {
-  it('escapes a lone <( sequence in prose to &lt;(', () => {
-    const out = convertHtmlScriptsToJsxComments('The syntax <(x, y) returns Ø.')
-    expect(out).toContain('&lt;(x, y)')
-    expect(out).not.toContain('<(')
-  })
+describe("convertHtmlScriptsToJsxComments — <( escape (line 128)", () => {
+  it("escapes a lone <( sequence in prose to &lt;(", () => {
+    const out = convertHtmlScriptsToJsxComments(
+      "The syntax <(x, y) returns Ø."
+    );
+    expect(out).toContain("&lt;(x, y)");
+    expect(out).not.toContain("<(");
+  });
 
-  it('escapes every <( occurrence in a paragraph', () => {
-    const out = convertHtmlScriptsToJsxComments('op1 <(a,b); op2 <(c,d); op3 <(e,f).')
-    expect(out).not.toContain('<(')
+  it("escapes every <( occurrence in a paragraph", () => {
+    const out = convertHtmlScriptsToJsxComments(
+      "op1 <(a,b); op2 <(c,d); op3 <(e,f)."
+    );
+    expect(out).not.toContain("<(");
     // Every literal `(` still shows up after the escape.
-    expect(out.match(/&lt;\(/g)).toHaveLength(3)
-  })
+    expect(out.match(/&lt;\(/g)).toHaveLength(3);
+  });
 
-  it('does not touch <letter or </letter sequences (regression guard)', () => {
-    const out = convertHtmlScriptsToJsxComments('<div>ok</div> and <(x)')
-    expect(out).toContain('<div>')
-    expect(out).toContain('&lt;(x)')
-  })
-})
+  it("does not touch <letter or </letter sequences (regression guard)", () => {
+    const out = convertHtmlScriptsToJsxComments("<div>ok</div> and <(x)");
+    expect(out).toContain("<div>");
+    expect(out).toContain("&lt;(x)");
+  });
+});
diff --git a/src/__tests__/transformMdx.test.ts b/src/__tests__/transformMdx.test.ts
index e9eea5a..1e76699 100644
--- a/src/__tests__/transformMdx.test.ts
+++ b/src/__tests__/transformMdx.test.ts
@@ -1,353 +1,353 @@
-import { describe, it, expect } from 'vitest'
-import { convertHtmlScriptsToJsxComments } from '@/lib/transformMdx'
-
-describe('convertHtmlScriptsToJsxComments', () => {
-  describe('script tag stripping', () => {
-    it('removes inline script tags', () => {
-      const input = '<p>Hello</p><script>alert("xss")</script><p>World</p>'
-      const result = convertHtmlScriptsToJsxComments(input)
-      expect(result).not.toContain('<script')
-      expect(result).not.toContain('alert')
-      expect(result).toContain('Hello')
-      expect(result).toContain('World')
-    })
-
-    it('removes self-closing script tags', () => {
-      const input = '<p>Safe</p><script src="evil.js"/><p>Content</p>'
-      const result = convertHtmlScriptsToJsxComments(input)
-      expect(result).not.toContain('<script')
-      expect(result).not.toContain('evil.js')
-    })
-
-    it('prevents nested-tag bypass (CWE-116) — strips payload', () => {
+import { describe, it, expect } from "vitest";
+import { convertHtmlScriptsToJsxComments } from "@/lib/transformMdx";
+
+describe("convertHtmlScriptsToJsxComments", () => {
+  describe("script tag stripping", () => {
+    it("removes inline script tags", () => {
+      const input = '<p>Hello</p><script>alert("xss")</script><p>World</p>';
+      const result = convertHtmlScriptsToJsxComments(input);
+      expect(result).not.toContain("<script");
+      expect(result).not.toContain("alert");
+      expect(result).toContain("Hello");
+      expect(result).toContain("World");
+    });
+
+    it("removes self-closing script tags", () => {
+      const input = '<p>Safe</p><script src="evil.js"/><p>Content</p>';
+      const result = convertHtmlScriptsToJsxComments(input);
+      expect(result).not.toContain("<script");
+      expect(result).not.toContain("evil.js");
+    });
+
+    it("prevents nested-tag bypass (CWE-116) — strips payload", () => {
       // After stripLoop removes the inner <script>...</script>, a lone
       // opening <script> tag reconstitutes but the dangerous payload
       // (alert) is still removed — the attack is neutralized.
-      const input = '<scr<script>ipt>alert("xss")</scr</script>ipt>'
-      const result = convertHtmlScriptsToJsxComments(input)
-      expect(result).not.toContain('alert')
-      expect(result).not.toContain('</script')
-    })
-
-    it('removes script tags with attributes', () => {
-      const input = '<script type="text/javascript" async>code()</script>'
-      const result = convertHtmlScriptsToJsxComments(input)
-      expect(result).not.toContain('<script')
-      expect(result).not.toContain('code()')
-    })
-  })
-
-  describe('style tag stripping', () => {
-    it('removes style blocks', () => {
-      const input = '<style>.evil { display: none }</style><p>Content</p>'
-      const result = convertHtmlScriptsToJsxComments(input)
-      expect(result).not.toContain('<style')
-      expect(result).not.toContain('.evil')
-      expect(result).toContain('Content')
-    })
-
-    it('strips nested style tag content (inner match)', () => {
+      const input = '<scr<script>ipt>alert("xss")</scr</script>ipt>';
+      const result = convertHtmlScriptsToJsxComments(input);
+      expect(result).not.toContain("alert");
+      expect(result).not.toContain("</script");
+    });
+
+    it("removes script tags with attributes", () => {
+      const input = '<script type="text/javascript" async>code()</script>';
+      const result = convertHtmlScriptsToJsxComments(input);
+      expect(result).not.toContain("<script");
+      expect(result).not.toContain("code()");
+    });
+  });
+
+  describe("style tag stripping", () => {
+    it("removes style blocks", () => {
+      const input = "<style>.evil { display: none }</style><p>Content</p>";
+      const result = convertHtmlScriptsToJsxComments(input);
+      expect(result).not.toContain("<style");
+      expect(result).not.toContain(".evil");
+      expect(result).toContain("Content");
+    });
+
+    it("strips nested style tag content (inner match)", () => {
       // After stripLoop removes <style>le>.x{}</sty</style>, a lone
       // opening <style> reconstitutes but carries no executable content.
       // The dangerous CSS payload (.x{}) is still removed.
-      const input = '<sty<style>le>.x{}</sty</style>le>'
-      const result = convertHtmlScriptsToJsxComments(input)
-      expect(result).not.toContain('.x{}')
-      expect(result).not.toContain('</style')
-    })
-  })
-
-  describe('event handler attribute removal', () => {
-    it('removes onclick handler', () => {
-      const input = '<div onclick="alert(1)">Click</div>'
-      const result = convertHtmlScriptsToJsxComments(input)
-      expect(result).not.toContain('onclick')
-      expect(result).not.toContain('alert')
-      expect(result).toContain('Click')
-    })
-
-    it('removes onload handler', () => {
-      const input = '<img src="x.png" onload="steal()" />'
-      const result = convertHtmlScriptsToJsxComments(input)
-      expect(result).not.toContain('onload')
-      expect(result).not.toContain('steal')
-    })
-
-    it('removes onerror handler with single quotes', () => {
-      const input = "<img src=\"x\" onerror='hack()' />"
-      const result = convertHtmlScriptsToJsxComments(input)
-      expect(result).not.toContain('onerror')
-      expect(result).not.toContain('hack')
-    })
-
-    it('removes JSX-style event handlers', () => {
-      const input = '<div onMouseOver={handleHover}>Hover</div>'
-      const result = convertHtmlScriptsToJsxComments(input)
-      expect(result).not.toContain('onMouseOver')
-    })
+      const input = "<sty<style>le>.x{}</sty</style>le>";
+      const result = convertHtmlScriptsToJsxComments(input);
+      expect(result).not.toContain(".x{}");
+      expect(result).not.toContain("</style");
+    });
+  });
+
+  describe("event handler attribute removal", () => {
+    it("removes onclick handler", () => {
+      const input = '<div onclick="alert(1)">Click</div>';
+      const result = convertHtmlScriptsToJsxComments(input);
+      expect(result).not.toContain("onclick");
+      expect(result).not.toContain("alert");
+      expect(result).toContain("Click");
+    });
+
+    it("removes onload handler", () => {
+      const input = '<img src="x.png" onload="steal()" />';
+      const result = convertHtmlScriptsToJsxComments(input);
+      expect(result).not.toContain("onload");
+      expect(result).not.toContain("steal");
+    });
+
+    it("removes onerror handler with single quotes", () => {
+      const input = "<img src=\"x\" onerror='hack()' />";
+      const result = convertHtmlScriptsToJsxComments(input);
+      expect(result).not.toContain("onerror");
+      expect(result).not.toContain("hack");
+    });
+
+    it("removes JSX-style event handlers", () => {
+      const input = "<div onMouseOver={handleHover}>Hover</div>";
+      const result = convertHtmlScriptsToJsxComments(input);
+      expect(result).not.toContain("onMouseOver");
+    });
 
     it('does not remove words starting with "on" in content', () => {
-      const input = '<p>Once upon a time, only one remained</p>'
-      const result = convertHtmlScriptsToJsxComments(input)
-      expect(result).toContain('Once upon a time')
-      expect(result).toContain('only one remained')
-    })
-  })
-
-  describe('inline style attribute stripping', () => {
-    it('removes style attribute with double quotes', () => {
-      const input = '<div style="color: red">Text</div>'
-      const result = convertHtmlScriptsToJsxComments(input)
-      expect(result).not.toContain('style=')
-      expect(result).not.toContain('color: red')
-      expect(result).toContain('Text')
-    })
-
-    it('removes JSX-style object style value (Jinja strip neutralizes content)', () => {
+      const input = "<p>Once upon a time, only one remained</p>";
+      const result = convertHtmlScriptsToJsxComments(input);
+      expect(result).toContain("Once upon a time");
+      expect(result).toContain("only one remained");
+    });
+  });
+
+  describe("inline style attribute stripping", () => {
+    it("removes style attribute with double quotes", () => {
+      const input = '<div style="color: red">Text</div>';
+      const result = convertHtmlScriptsToJsxComments(input);
+      expect(result).not.toContain("style=");
+      expect(result).not.toContain("color: red");
+      expect(result).toContain("Text");
+    });
+
+    it("removes JSX-style object style value (Jinja strip neutralizes content)", () => {
       // The {{...}} Jinja-template strip runs before style-attribute removal,
       // so the object value is removed by the earlier pass. The bare `style=`
       // key remains but carries no executable CSS.
-      const input = '<div style={{color: "red"}}>Text</div>'
-      const result = convertHtmlScriptsToJsxComments(input)
-      expect(result).not.toContain('color')
-      expect(result).not.toContain('red')
-      expect(result).toContain('Text')
-    })
-  })
-
-  describe('code fence preservation', () => {
-    it('does not transform content inside triple backticks', () => {
-      const input = '```\n<script>alert("safe")</script>\n```'
-      const result = convertHtmlScriptsToJsxComments(input)
-      expect(result).toContain('<script>alert("safe")</script>')
-    })
-
-    it('does not transform content inside inline backticks', () => {
-      const input = 'Use `<script>` tags for scripts'
-      const result = convertHtmlScriptsToJsxComments(input)
-      expect(result).toContain('`<script>`')
-    })
-
-    it('does not transform content inside <pre> tags', () => {
-      const input = '<pre><script>example()</script></pre>'
-      const result = convertHtmlScriptsToJsxComments(input)
-      expect(result).toContain('<script>example()</script>')
-    })
-  })
-
-  describe('HTML comment conversion', () => {
-    it('converts HTML comments to JSX comments', () => {
+      const input = '<div style={{color: "red"}}>Text</div>';
+      const result = convertHtmlScriptsToJsxComments(input);
+      expect(result).not.toContain("color");
+      expect(result).not.toContain("red");
+      expect(result).toContain("Text");
+    });
+  });
+
+  describe("code fence preservation", () => {
+    it("does not transform content inside triple backticks", () => {
+      const input = '```\n<script>alert("safe")</script>\n```';
+      const result = convertHtmlScriptsToJsxComments(input);
+      expect(result).toContain('<script>alert("safe")</script>');
+    });
+
+    it("does not transform content inside inline backticks", () => {
+      const input = "Use `<script>` tags for scripts";
+      const result = convertHtmlScriptsToJsxComments(input);
+      expect(result).toContain("`<script>`");
+    });
+
+    it("does not transform content inside <pre> tags", () => {
+      const input = "<pre><script>example()</script></pre>";
+      const result = convertHtmlScriptsToJsxComments(input);
+      expect(result).toContain("<script>example()</script>");
+    });
+  });
+
+  describe("HTML comment conversion", () => {
+    it("converts HTML comments to JSX comments", () => {
       // HTML comments are converted to JSX block comments {/* ... */}.
       // The HTML comment is still neutralized (no longer <!-- -->).
-      const input = '<!-- This is a comment -->'
-      const result = convertHtmlScriptsToJsxComments(input)
-      expect(result).not.toContain('<!--')
-      expect(result).toContain('{/*This is a comment*/}')
-    })
-
-    it('handles multi-line comments', () => {
-      const input = '<!--\n  Multi-line\n  comment\n-->'
-      const result = convertHtmlScriptsToJsxComments(input)
-      expect(result).toContain('{/*')
-      expect(result).toContain('*/}')
-      expect(result).not.toContain('<!--')
-    })
-  })
-
-  describe('void element self-closing', () => {
-    it('converts <br> to <br />', () => {
-      const input = '<p>Line 1<br>Line 2</p>'
-      const result = convertHtmlScriptsToJsxComments(input)
-      expect(result).toContain('<br />')
-      expect(result).not.toMatch(/<br>/)
-    })
-
-    it('converts <img> with attributes to self-closing', () => {
-      const input = '<img src="photo.jpg" alt="Photo">'
-      const result = convertHtmlScriptsToJsxComments(input)
-      expect(result).toContain('<img')
-      expect(result).toContain('/>')
-    })
-
-    it('removes closing void tags like </br>', () => {
-      const input = '<br></br>'
-      const result = convertHtmlScriptsToJsxComments(input)
-      expect(result).not.toContain('</br>')
-    })
-  })
-
-  describe('JSX attribute conversion', () => {
-    it('converts class to className', () => {
-      const input = '<div class="container">Content</div>'
-      const result = convertHtmlScriptsToJsxComments(input)
-      expect(result).toContain('className="container"')
-      expect(result).not.toMatch(/\bclass=/)
-    })
-
-    it('converts for to htmlFor', () => {
-      const input = '<label for="email">Email</label>'
-      const result = convertHtmlScriptsToJsxComments(input)
-      expect(result).toContain('htmlFor="email"')
-      expect(result).not.toMatch(/\bfor=/)
-    })
-
-    it('converts tabindex to tabIndex', () => {
-      const input = '<div tabindex="0">Focusable</div>'
-      const result = convertHtmlScriptsToJsxComments(input)
-      expect(result).toContain('tabIndex')
-    })
-  })
-
-  describe('template literal escaping', () => {
-    it('strips Jinja2 {% %} blocks', () => {
-      const input = '<p>{% if true %}show{% endif %}</p>'
-      const result = convertHtmlScriptsToJsxComments(input)
-      expect(result).not.toContain('{%')
-      expect(result).not.toContain('%}')
-    })
-
-    it('strips Jinja2 {{ }} expressions', () => {
-      const input = '<p>Hello {{ username }}</p>'
-      const result = convertHtmlScriptsToJsxComments(input)
-      expect(result).not.toContain('{{ username }}')
-    })
-
-    it('escapes remaining curly braces', () => {
-      const input = '<p>Object: {key: value}</p>'
-      const result = convertHtmlScriptsToJsxComments(input)
-      expect(result).toContain('&#123;')
-      expect(result).toContain('&#125;')
-    })
-  })
-
-  describe('bare angle bracket escaping', () => {
-    it('escapes < not followed by tag characters', () => {
-      const input = '<p>x < y and y > z</p>'
-      const result = convertHtmlScriptsToJsxComments(input)
-      expect(result).toContain('&lt;')
-    })
-  })
-
-  describe('unquoted href/src attributes', () => {
+      const input = "<!-- This is a comment -->";
+      const result = convertHtmlScriptsToJsxComments(input);
+      expect(result).not.toContain("<!--");
+      expect(result).toContain("{/*This is a comment*/}");
+    });
+
+    it("handles multi-line comments", () => {
+      const input = "<!--\n  Multi-line\n  comment\n-->";
+      const result = convertHtmlScriptsToJsxComments(input);
+      expect(result).toContain("{/*");
+      expect(result).toContain("*/}");
+      expect(result).not.toContain("<!--");
+    });
+  });
+
+  describe("void element self-closing", () => {
+    it("converts <br> to <br />", () => {
+      const input = "<p>Line 1<br>Line 2</p>";
+      const result = convertHtmlScriptsToJsxComments(input);
+      expect(result).toContain("<br />");
+      expect(result).not.toMatch(/<br>/);
+    });
+
+    it("converts <img> with attributes to self-closing", () => {
+      const input = '<img src="photo.jpg" alt="Photo">';
+      const result = convertHtmlScriptsToJsxComments(input);
+      expect(result).toContain("<img");
+      expect(result).toContain("/>");
+    });
+
+    it("removes closing void tags like </br>", () => {
+      const input = "<br></br>";
+      const result = convertHtmlScriptsToJsxComments(input);
+      expect(result).not.toContain("</br>");
+    });
+  });
+
+  describe("JSX attribute conversion", () => {
+    it("converts class to className", () => {
+      const input = '<div class="container">Content</div>';
+      const result = convertHtmlScriptsToJsxComments(input);
+      expect(result).toContain('className="container"');
+      expect(result).not.toMatch(/\bclass=/);
+    });
+
+    it("converts for to htmlFor", () => {
+      const input = '<label for="email">Email</label>';
+      const result = convertHtmlScriptsToJsxComments(input);
+      expect(result).toContain('htmlFor="email"');
+      expect(result).not.toMatch(/\bfor=/);
+    });
+
+    it("converts tabindex to tabIndex", () => {
+      const input = '<div tabindex="0">Focusable</div>';
+      const result = convertHtmlScriptsToJsxComments(input);
+      expect(result).toContain("tabIndex");
+    });
+  });
+
+  describe("template literal escaping", () => {
+    it("strips Jinja2 {% %} blocks", () => {
+      const input = "<p>{% if true %}show{% endif %}</p>";
+      const result = convertHtmlScriptsToJsxComments(input);
+      expect(result).not.toContain("{%");
+      expect(result).not.toContain("%}");
+    });
+
+    it("strips Jinja2 {{ }} expressions", () => {
+      const input = "<p>Hello {{ username }}</p>";
+      const result = convertHtmlScriptsToJsxComments(input);
+      expect(result).not.toContain("{{ username }}");
+    });
+
+    it("escapes remaining curly braces", () => {
+      const input = "<p>Object: {key: value}</p>";
+      const result = convertHtmlScriptsToJsxComments(input);
+      expect(result).toContain("&#123;");
+      expect(result).toContain("&#125;");
+    });
+  });
+
+  describe("bare angle bracket escaping", () => {
+    it("escapes < not followed by tag characters", () => {
+      const input = "<p>x < y and y > z</p>";
+      const result = convertHtmlScriptsToJsxComments(input);
+      expect(result).toContain("&lt;");
+    });
+  });
+
+  describe("unquoted href/src attributes", () => {
     // Exercises the (_m, k, v) callback that quotes bare
     // `href=foo.html` / `src=x.png` attributes so downstream JSX parsing
     // does not choke on unquoted values. (transformMdx.ts:86)
-    it('quotes bare href attribute values', () => {
-      const input = '<a href=about.html>About</a>'
-      const result = convertHtmlScriptsToJsxComments(input)
-      expect(result).toContain('href="about.html"')
-    })
-
-    it('quotes bare src attribute values', () => {
-      const input = '<img src=logo.png alt="Logo">'
-      const result = convertHtmlScriptsToJsxComments(input)
-      expect(result).toContain('src="logo.png"')
-    })
-
-    it('leaves already-quoted href/src untouched', () => {
-      const input = '<a href="about.html">x</a>'
-      const result = convertHtmlScriptsToJsxComments(input)
+    it("quotes bare href attribute values", () => {
+      const input = "<a href=about.html>About</a>";
+      const result = convertHtmlScriptsToJsxComments(input);
+      expect(result).toContain('href="about.html"');
+    });
+
+    it("quotes bare src attribute values", () => {
+      const input = '<img src=logo.png alt="Logo">';
+      const result = convertHtmlScriptsToJsxComments(input);
+      expect(result).toContain('src="logo.png"');
+    });
+
+    it("leaves already-quoted href/src untouched", () => {
+      const input = '<a href="about.html">x</a>';
+      const result = convertHtmlScriptsToJsxComments(input);
       // Single quotes only — no double-quoting.
-      expect(result).toContain('href="about.html"')
-      expect(result).not.toContain('href=""about.html""')
-    })
-  })
+      expect(result).toContain('href="about.html"');
+      expect(result).not.toContain('href=""about.html""');
+    });
+  });
 
-  describe('custom-element (hyphen/underscore) tag escaping', () => {
+  describe("custom-element (hyphen/underscore) tag escaping", () => {
     // Exercises the four `.replace(...)` callbacks at
     // transformMdx.ts:120-128 which encode raw custom-element tags into
     // entity-escaped text so MDX does not try to render an undefined
     // component. Any tag name containing `-` or `_` is a custom element
     // per the HTML spec, not a valid JSX identifier.
 
-    it('encodes an unknown hyphenated opening tag', () => {
-      const input = '<p>See <my-widget> here</p>'
-      const result = convertHtmlScriptsToJsxComments(input)
-      expect(result).toContain('&lt;my-widget&gt;')
-      expect(result).not.toContain('<my-widget>')
-    })
+    it("encodes an unknown hyphenated opening tag", () => {
+      const input = "<p>See <my-widget> here</p>";
+      const result = convertHtmlScriptsToJsxComments(input);
+      expect(result).toContain("&lt;my-widget&gt;");
+      expect(result).not.toContain("<my-widget>");
+    });
 
-    it('encodes an unknown hyphenated closing tag', () => {
+    it("encodes an unknown hyphenated closing tag", () => {
       // Regression test for the [A-ZaZ0-9._-] typo previously at
       // transformMdx.ts:124. Lowercase hyphenated custom-element
       // closing tags must be entity-escaped just like their opening
       // counterparts, otherwise MDX sees `</my-widget>` and tries to
       // resolve it as a React component.
-      const input = '<p>End </my-widget> here</p>'
-      const result = convertHtmlScriptsToJsxComments(input)
-      expect(result).toContain('&lt;/my-widget&gt;')
-      expect(result).not.toContain('</my-widget>')
-    })
-
-    it('encodes an unknown uppercase hyphenated closing tag', () => {
-      const input = '<p>End </MY-WIDGET> here</p>'
-      const result = convertHtmlScriptsToJsxComments(input)
-      expect(result).toContain('&lt;/MY-WIDGET&gt;')
-      expect(result).not.toContain('</MY-WIDGET>')
-    })
-
-    it('encodes an unknown underscore-separated opening tag', () => {
-      const input = '<p><custom_widget></p>'
-      const result = convertHtmlScriptsToJsxComments(input)
-      expect(result).toContain('&lt;custom_widget&gt;')
-    })
-
-    it('encodes a backslash-escaped opening tag', () => {
+      const input = "<p>End </my-widget> here</p>";
+      const result = convertHtmlScriptsToJsxComments(input);
+      expect(result).toContain("&lt;/my-widget&gt;");
+      expect(result).not.toContain("</my-widget>");
+    });
+
+    it("encodes an unknown uppercase hyphenated closing tag", () => {
+      const input = "<p>End </MY-WIDGET> here</p>";
+      const result = convertHtmlScriptsToJsxComments(input);
+      expect(result).toContain("&lt;/MY-WIDGET&gt;");
+      expect(result).not.toContain("</MY-WIDGET>");
+    });
+
+    it("encodes an unknown underscore-separated opening tag", () => {
+      const input = "<p><custom_widget></p>";
+      const result = convertHtmlScriptsToJsxComments(input);
+      expect(result).toContain("&lt;custom_widget&gt;");
+    });
+
+    it("encodes a backslash-escaped opening tag", () => {
       // Author wrote `<Component\>` in the .mdx source to escape the JSX
       // parser; the transformer must convert it to a literal entity so
       // downstream MDX treats it as text.
-      const input = '<p>Example: <Component\\></p>'
-      const result = convertHtmlScriptsToJsxComments(input)
-      expect(result).toContain('&lt;Component&gt;')
-    })
-
-    it('encodes a backslash-escaped closing tag', () => {
-      const input = '<p>Example: </Component\\></p>'
-      const result = convertHtmlScriptsToJsxComments(input)
-      expect(result).toContain('&lt;/Component&gt;')
-    })
-  })
-
-  describe('paragraph wrapping a block-level element is rewritten to div', () => {
+      const input = "<p>Example: <Component\\></p>";
+      const result = convertHtmlScriptsToJsxComments(input);
+      expect(result).toContain("&lt;Component&gt;");
+    });
+
+    it("encodes a backslash-escaped closing tag", () => {
+      const input = "<p>Example: </Component\\></p>";
+      const result = convertHtmlScriptsToJsxComments(input);
+      expect(result).toContain("&lt;/Component&gt;");
+    });
+  });
+
+  describe("paragraph wrapping a block-level element is rewritten to div", () => {
     // Exercises the `<p ...>...<div|iframe|table|pre|section|article|ul|ol|h1-6>...` →
     // `<div ...>...</div>` rewriter at transformMdx.ts:152. React logs a
     // hydration warning when a <p> contains block-level children; the
     // transformer replaces the outer <p> with a <div> to avoid it.
 
-    it('rewrites <p><div>...</div></p> to <div><div>...</div></div>', () => {
-      const input = '<p class="wrap"><div>inner</div></p>'
-      const result = convertHtmlScriptsToJsxComments(input)
-      expect(result).toContain('<div')
-      expect(result).toContain('inner')
+    it("rewrites <p><div>...</div></p> to <div><div>...</div></div>", () => {
+      const input = '<p class="wrap"><div>inner</div></p>';
+      const result = convertHtmlScriptsToJsxComments(input);
+      expect(result).toContain("<div");
+      expect(result).toContain("inner");
       // The outer <p> tag must be gone; only <div> remains.
-      expect(result).not.toMatch(/<p\b/)
-    })
+      expect(result).not.toMatch(/<p\b/);
+    });
 
-    it('preserves the outer <p>\'s attributes on the rewritten <div>', () => {
-      const input = '<p id="para"><ul><li>x</li></ul></p>'
-      const result = convertHtmlScriptsToJsxComments(input)
+    it("preserves the outer <p>'s attributes on the rewritten <div>", () => {
+      const input = '<p id="para"><ul><li>x</li></ul></p>';
+      const result = convertHtmlScriptsToJsxComments(input);
       // The id attribute must survive the rewrite.
-      expect(result).toContain('id="para"')
-      expect(result).not.toMatch(/<p\b/)
-    })
+      expect(result).toContain('id="para"');
+      expect(result).not.toMatch(/<p\b/);
+    });
 
-    it.each(['table', 'section', 'article', 'ol', 'iframe'])(
-      'rewrites <p> wrapping <%s> to <div>',
+    it.each(["table", "section", "article", "ol", "iframe"])(
+      "rewrites <p> wrapping <%s> to <div>",
       block => {
-        const input = `<p><${block}>body</${block}></p>`
-        const result = convertHtmlScriptsToJsxComments(input)
-        expect(result).not.toMatch(/<p\b/)
-        expect(result).toContain('<div')
+        const input = `<p><${block}>body</${block}></p>`;
+        const result = convertHtmlScriptsToJsxComments(input);
+        expect(result).not.toMatch(/<p\b/);
+        expect(result).toContain("<div");
       }
-    )
+    );
 
-    it('rewrites <p> wrapping <h1-6> to <div>', () => {
+    it("rewrites <p> wrapping <h1-6> to <div>", () => {
       for (const level of [1, 2, 3, 4, 5, 6]) {
-        const input = `<p><h${level}>title</h${level}></p>`
-        const result = convertHtmlScriptsToJsxComments(input)
-        expect(result).not.toMatch(/<p\b/)
-        expect(result).toContain('<div')
+        const input = `<p><h${level}>title</h${level}></p>`;
+        const result = convertHtmlScriptsToJsxComments(input);
+        expect(result).not.toMatch(/<p\b/);
+        expect(result).toContain("<div");
       }
-    })
-  })
-})
+    });
+  });
+});
diff --git a/src/__tests__/transformMdx.tilde-fence-and-closer.test.ts b/src/__tests__/transformMdx.tilde-fence-and-closer.test.ts
index 2c9d8fb..5d2068b 100644
--- a/src/__tests__/transformMdx.tilde-fence-and-closer.test.ts
+++ b/src/__tests__/transformMdx.tilde-fence-and-closer.test.ts
@@ -16,65 +16,68 @@
  *      of the same rewrite was unreached — meaning a rewrite that
  *      dropped or broke the closing-tag rule would slip through CI.
  */
-import { describe, it, expect } from 'vitest'
-import { convertHtmlScriptsToJsxComments } from '@/lib/transformMdx'
+import { describe, it, expect } from "vitest";
+import { convertHtmlScriptsToJsxComments } from "@/lib/transformMdx";
 
-describe('convertHtmlScriptsToJsxComments — tilde-fenced code blocks', () => {
-  it('preserves a ~~~ fenced block verbatim (does not HTML-escape its <> braces)', () => {
+describe("convertHtmlScriptsToJsxComments — tilde-fenced code blocks", () => {
+  it("preserves a ~~~ fenced block verbatim (does not HTML-escape its <> braces)", () => {
     const input =
-      'Prose.\n\n~~~\n<script>alert("still ok inside fence")</script>\n~~~\n\nMore prose.'
-    const out = convertHtmlScriptsToJsxComments(input)
+      'Prose.\n\n~~~\n<script>alert("still ok inside fence")</script>\n~~~\n\nMore prose.';
+    const out = convertHtmlScriptsToJsxComments(input);
     // The whole fence — including the raw <script>...</script> — must
     // pass through untouched because it's a code sample, not real markup.
-    expect(out).toContain('~~~\n<script>alert("still ok inside fence")</script>\n~~~')
+    expect(out).toContain(
+      '~~~\n<script>alert("still ok inside fence")</script>\n~~~'
+    );
     // And it must not have been escaped or emptied.
-    expect(out).not.toContain('&lt;script')
-  })
+    expect(out).not.toContain("&lt;script");
+  });
 
-  it('preserves a language-tagged tilde fence containing brace-heavy content', () => {
+  it("preserves a language-tagged tilde fence containing brace-heavy content", () => {
     // Brace stripping runs later; content inside the fence must survive it.
-    const input = '~~~yaml\nkey: {{ template }}\n~~~'
-    const out = convertHtmlScriptsToJsxComments(input)
-    expect(out).toContain('~~~yaml\nkey: {{ template }}\n~~~')
+    const input = "~~~yaml\nkey: {{ template }}\n~~~";
+    const out = convertHtmlScriptsToJsxComments(input);
+    expect(out).toContain("~~~yaml\nkey: {{ template }}\n~~~");
     // Confirm the {{ }} were not rewritten to &#123;&#123; inside the fence.
-    expect(out).not.toContain('&#123;&#123;')
-  })
+    expect(out).not.toContain("&#123;&#123;");
+  });
 
-  it('preserves a tilde fence of 4+ tildes (CommonMark allows any run ≥3)', () => {
-    const input = '~~~~\n<div>raw</div>\n~~~~'
-    const out = convertHtmlScriptsToJsxComments(input)
-    expect(out).toContain('~~~~\n<div>raw</div>\n~~~~')
-  })
+  it("preserves a tilde fence of 4+ tildes (CommonMark allows any run ≥3)", () => {
+    const input = "~~~~\n<div>raw</div>\n~~~~";
+    const out = convertHtmlScriptsToJsxComments(input);
+    expect(out).toContain("~~~~\n<div>raw</div>\n~~~~");
+  });
 
-  it('still processes tags outside the tilde fence', () => {
+  it("still processes tags outside the tilde fence", () => {
     // Sanity: fence preserves; surrounding markup is still transformed.
-    const input = '<my-tag>before</my-tag>\n~~~\n<my-tag>inside</my-tag>\n~~~\n<my-tag>after</my-tag>'
-    const out = convertHtmlScriptsToJsxComments(input)
+    const input =
+      "<my-tag>before</my-tag>\n~~~\n<my-tag>inside</my-tag>\n~~~\n<my-tag>after</my-tag>";
+    const out = convertHtmlScriptsToJsxComments(input);
     // Custom tags outside the fence get escaped by the hyphenated-name rule.
-    expect(out).toContain('&lt;my-tag&gt;before&lt;/my-tag&gt;')
-    expect(out).toContain('&lt;my-tag&gt;after&lt;/my-tag&gt;')
+    expect(out).toContain("&lt;my-tag&gt;before&lt;/my-tag&gt;");
+    expect(out).toContain("&lt;my-tag&gt;after&lt;/my-tag&gt;");
     // But the same tag inside the fence survives raw.
-    expect(out).toContain('~~~\n<my-tag>inside</my-tag>\n~~~')
-  })
-})
+    expect(out).toContain("~~~\n<my-tag>inside</my-tag>\n~~~");
+  });
+});
 
-describe('convertHtmlScriptsToJsxComments — closing-tag backslash-close escape', () => {
-  it('escapes a closing tag whose author self-closed with a trailing backslash: </foo\\>', () => {
+describe("convertHtmlScriptsToJsxComments — closing-tag backslash-close escape", () => {
+  it("escapes a closing tag whose author self-closed with a trailing backslash: </foo\\>", () => {
     // MkDocs/mkdocs-material users sometimes escape a literal closing
     // bracket with a backslash to keep MDX from parsing the tag. The
     // opener rule (<foo\>) is already tested; this exercises the paired
     // closer rule so both branches of the pair are locked in.
-    const input = '<div>foo</div\\>'
-    const out = convertHtmlScriptsToJsxComments(input)
+    const input = "<div>foo</div\\>";
+    const out = convertHtmlScriptsToJsxComments(input);
     // The malformed closer is rewritten to escaped text (no raw </div).
-    expect(out).toMatch(/&lt;\/div&gt;/)
-    expect(out).not.toContain('</div\\>')
-  })
+    expect(out).toMatch(/&lt;\/div&gt;/);
+    expect(out).not.toContain("</div\\>");
+  });
 
-  it('handles a closing custom-element tag with backslash close', () => {
-    const input = '</my-element\\>'
-    const out = convertHtmlScriptsToJsxComments(input)
-    expect(out).toContain('&lt;/my-element&gt;')
-    expect(out).not.toContain('\\>')
-  })
-})
+  it("handles a closing custom-element tag with backslash close", () => {
+    const input = "</my-element\\>";
+    const out = convertHtmlScriptsToJsxComments(input);
+    expect(out).toContain("&lt;/my-element&gt;");
+    expect(out).not.toContain("\\>");
+  });
+});
diff --git a/src/__tests__/url.getLocalizedUrl.test.ts b/src/__tests__/url.getLocalizedUrl.test.ts
index c077068..cc89402 100644
--- a/src/__tests__/url.getLocalizedUrl.test.ts
+++ b/src/__tests__/url.getLocalizedUrl.test.ts
@@ -1,4 +1,4 @@
-import { describe, it, expect, vi, beforeEach, afterEach } from 'vitest'
+import { describe, it, expect, vi, beforeEach, afterEach } from "vitest";
 
 /**
  * Unit tests for getLocalizedUrl() and the server-side production fallback of
@@ -6,98 +6,106 @@ import { describe, it, expect, vi, beforeEach, afterEach } from 'vitest'
  * hostname validation of getBaseUrl().
  */
 
-const originalWindow = globalThis.window
+const originalWindow = globalThis.window;
 
-function mockWindow(host: string, protocol = 'https:') {
-  Object.defineProperty(globalThis, 'window', {
+function mockWindow(host: string, protocol = "https:") {
+  Object.defineProperty(globalThis, "window", {
     value: { location: { host, protocol } },
     writable: true,
     configurable: true,
-  })
+  });
 }
 
 function restoreWindow() {
   if (originalWindow === undefined) {
     // @ts-expect-error - removing window for SSR tests
-    delete globalThis.window
+    delete globalThis.window;
   } else {
-    Object.defineProperty(globalThis, 'window', {
+    Object.defineProperty(globalThis, "window", {
       value: originalWindow,
       writable: true,
       configurable: true,
-    })
+    });
   }
 }
 
 async function importFresh() {
-  vi.resetModules()
-  return await import('../lib/url')
+  vi.resetModules();
+  return await import("../lib/url");
 }
 
 afterEach(() => {
-  restoreWindow()
-  vi.unstubAllEnvs()
-  vi.restoreAllMocks()
-})
+  restoreWindow();
+  vi.unstubAllEnvs();
+  vi.restoreAllMocks();
+});
 
-describe('getBaseUrl — server-side production fallback', () => {
+describe("getBaseUrl — server-side production fallback", () => {
   beforeEach(() => {
-    restoreWindow()
-  })
+    restoreWindow();
+  });
 
-  it('falls back to the production URL when not in development and no base URL is set', async () => {
-    vi.stubEnv('NODE_ENV', 'production')
-    vi.stubEnv('NEXT_PUBLIC_BASE_URL', '')
-    const mod = await importFresh()
-    expect(mod.getBaseUrl()).toBe('https://docs.hivecommons.dev')
-  })
-})
+  it("falls back to the production URL when not in development and no base URL is set", async () => {
+    vi.stubEnv("NODE_ENV", "production");
+    vi.stubEnv("NEXT_PUBLIC_BASE_URL", "");
+    const mod = await importFresh();
+    expect(mod.getBaseUrl()).toBe("https://docs.hivecommons.dev");
+  });
+});
 
-describe('getLocalizedUrl', () => {
-  it('returns relative URLs unchanged', async () => {
-    const mod = await importFresh()
-    expect(mod.getLocalizedUrl('/docs/architecture')).toBe('/docs/architecture')
-    expect(mod.getLocalizedUrl('docs/architecture')).toBe('docs/architecture')
-    expect(mod.getLocalizedUrl('#anchor')).toBe('#anchor')
-    expect(mod.getLocalizedUrl('')).toBe('')
-  })
+describe("getLocalizedUrl", () => {
+  it("returns relative URLs unchanged", async () => {
+    const mod = await importFresh();
+    expect(mod.getLocalizedUrl("/docs/architecture")).toBe(
+      "/docs/architecture"
+    );
+    expect(mod.getLocalizedUrl("docs/architecture")).toBe("docs/architecture");
+    expect(mod.getLocalizedUrl("#anchor")).toBe("#anchor");
+    expect(mod.getLocalizedUrl("")).toBe("");
+  });
 
-  it('returns external absolute URLs unchanged', async () => {
-    const mod = await importFresh()
-    expect(mod.getLocalizedUrl('https://example.com/docs')).toBe('https://example.com/docs')
-    expect(mod.getLocalizedUrl('http://github.com/hivecommons/hive')).toBe(
-      'http://github.com/hivecommons/hive'
-    )
-  })
+  it("returns external absolute URLs unchanged", async () => {
+    const mod = await importFresh();
+    expect(mod.getLocalizedUrl("https://example.com/docs")).toBe(
+      "https://example.com/docs"
+    );
+    expect(mod.getLocalizedUrl("http://github.com/hivecommons/hive")).toBe(
+      "http://github.com/hivecommons/hive"
+    );
+  });
 
-  it('does not rewrite lookalike hostnames', async () => {
-    const mod = await importFresh()
-    const evil = 'https://docs.hivecommons.dev.evil.com/docs'
-    expect(mod.getLocalizedUrl(evil)).toBe(evil)
-  })
+  it("does not rewrite lookalike hostnames", async () => {
+    const mod = await importFresh();
+    const evil = "https://docs.hivecommons.dev.evil.com/docs";
+    expect(mod.getLocalizedUrl(evil)).toBe(evil);
+  });
 
-  it('rewrites docs.hivecommons.dev URLs to the current base on a preview host', async () => {
-    mockWindow('deploy-preview-7--hivecommons-docs.netlify.app', 'https:')
-    const mod = await importFresh()
-    expect(mod.getLocalizedUrl('https://docs.hivecommons.dev/docs/architecture')).toBe(
-      'https://deploy-preview-7--hivecommons-docs.netlify.app/docs/architecture'
-    )
-  })
+  it("rewrites docs.hivecommons.dev URLs to the current base on a preview host", async () => {
+    mockWindow("deploy-preview-7--hivecommons-docs.netlify.app", "https:");
+    const mod = await importFresh();
+    expect(
+      mod.getLocalizedUrl("https://docs.hivecommons.dev/docs/architecture")
+    ).toBe(
+      "https://deploy-preview-7--hivecommons-docs.netlify.app/docs/architecture"
+    );
+  });
 
-  it('preserves query string and hash when rewriting', async () => {
-    mockWindow('localhost:3000', 'http:')
-    const mod = await importFresh()
+  it("preserves query string and hash when rewriting", async () => {
+    mockWindow("localhost:3000", "http:");
+    const mod = await importFresh();
     expect(
-      mod.getLocalizedUrl('https://docs.hivecommons.dev/docs?version=latest#install')
-    ).toBe('http://localhost:3000/docs?version=latest#install')
-  })
+      mod.getLocalizedUrl(
+        "https://docs.hivecommons.dev/docs?version=latest#install"
+      )
+    ).toBe("http://localhost:3000/docs?version=latest#install");
+  });
 
-  it('returns the original string when URL parsing fails', async () => {
-    const mod = await importFresh()
-    const errSpy = vi.spyOn(console, 'error').mockImplementation(() => {})
+  it("returns the original string when URL parsing fails", async () => {
+    const mod = await importFresh();
+    const errSpy = vi.spyOn(console, "error").mockImplementation(() => {});
     // Starts with http:// so it is not treated as relative, but is unparseable.
-    const malformed = 'http://'
-    expect(mod.getLocalizedUrl(malformed)).toBe(malformed)
-    expect(errSpy).toHaveBeenCalled()
-  })
-})
+    const malformed = "http://";
+    expect(mod.getLocalizedUrl(malformed)).toBe(malformed);
+    expect(errSpy).toHaveBeenCalled();
+  });
+});
diff --git a/src/__tests__/url.test.ts b/src/__tests__/url.test.ts
index 3844620..428d967 100644
--- a/src/__tests__/url.test.ts
+++ b/src/__tests__/url.test.ts
@@ -1,4 +1,4 @@
-import { describe, it, expect, vi, beforeEach, afterEach } from 'vitest'
+import { describe, it, expect, vi, beforeEach, afterEach } from "vitest";
 
 /**
  * Unit tests for getBaseUrl() hostname validation.
@@ -9,125 +9,127 @@ import { describe, it, expect, vi, beforeEach, afterEach } from 'vitest'
  */
 
 // We need to control window.location for client-side tests
-const originalWindow = globalThis.window
+const originalWindow = globalThis.window;
 
-function mockWindow(host: string, protocol = 'https:') {
-  Object.defineProperty(globalThis, 'window', {
+function mockWindow(host: string, protocol = "https:") {
+  Object.defineProperty(globalThis, "window", {
     value: { location: { host, protocol } },
     writable: true,
     configurable: true,
-  })
+  });
 }
 
 function restoreWindow() {
   if (originalWindow === undefined) {
     // @ts-expect-error - removing window for SSR tests
-    delete globalThis.window
+    delete globalThis.window;
   } else {
-    Object.defineProperty(globalThis, 'window', {
+    Object.defineProperty(globalThis, "window", {
       value: originalWindow,
       writable: true,
       configurable: true,
-    })
+    });
   }
 }
 
-describe('getBaseUrl — client-side hostname validation', () => {
+describe("getBaseUrl — client-side hostname validation", () => {
   beforeEach(() => {
-    vi.resetModules()
-  })
+    vi.resetModules();
+  });
 
   afterEach(() => {
-    restoreWindow()
-  })
+    restoreWindow();
+  });
 
   async function loadGetBaseUrl() {
-    const mod = await import('../lib/url')
-    return mod.getBaseUrl
+    const mod = await import("../lib/url");
+    return mod.getBaseUrl;
   }
 
   // --- Legitimate preview/local hostnames (should return current host) ---
 
-  it('returns current host for localhost', async () => {
-    mockWindow('localhost:3000', 'http:')
-    const getBaseUrl = await loadGetBaseUrl()
-    expect(getBaseUrl()).toBe('http://localhost:3000')
-  })
-
-  it('returns current host for 127.0.0.1', async () => {
-    mockWindow('127.0.0.1:3000', 'http:')
-    const getBaseUrl = await loadGetBaseUrl()
-    expect(getBaseUrl()).toBe('http://127.0.0.1:3000')
-  })
-
-  it('returns current host for *.netlify.app', async () => {
-    mockWindow('deploy-preview-42--kubestellar-docs.netlify.app', 'https:')
-    const getBaseUrl = await loadGetBaseUrl()
-    expect(getBaseUrl()).toBe('https://deploy-preview-42--kubestellar-docs.netlify.app')
-  })
+  it("returns current host for localhost", async () => {
+    mockWindow("localhost:3000", "http:");
+    const getBaseUrl = await loadGetBaseUrl();
+    expect(getBaseUrl()).toBe("http://localhost:3000");
+  });
+
+  it("returns current host for 127.0.0.1", async () => {
+    mockWindow("127.0.0.1:3000", "http:");
+    const getBaseUrl = await loadGetBaseUrl();
+    expect(getBaseUrl()).toBe("http://127.0.0.1:3000");
+  });
+
+  it("returns current host for *.netlify.app", async () => {
+    mockWindow("deploy-preview-42--kubestellar-docs.netlify.app", "https:");
+    const getBaseUrl = await loadGetBaseUrl();
+    expect(getBaseUrl()).toBe(
+      "https://deploy-preview-42--kubestellar-docs.netlify.app"
+    );
+  });
 
   // --- Malicious hostnames that should NOT be treated as preview ---
 
-  it('does NOT match evil-previews.hivecommons.dev (prefix attack)', async () => {
-    mockWindow('evil-previews.hivecommons.dev', 'https:')
-    const getBaseUrl = await loadGetBaseUrl()
+  it("does NOT match evil-previews.hivecommons.dev (prefix attack)", async () => {
+    mockWindow("evil-previews.hivecommons.dev", "https:");
+    const getBaseUrl = await loadGetBaseUrl();
     // Should fall through to production URL, NOT return current host
-    expect(getBaseUrl()).not.toBe('https://evil-previews.hivecommons.dev')
-  })
-
-  it('does NOT match localhost.evil.com (suffix attack)', async () => {
-    mockWindow('localhost.evil.com', 'https:')
-    const getBaseUrl = await loadGetBaseUrl()
-    expect(getBaseUrl()).not.toBe('https://localhost.evil.com')
-  })
-
-  it('does NOT match evil-netlify.app (not a subdomain)', async () => {
-    mockWindow('evil-netlify.app', 'https:')
-    const getBaseUrl = await loadGetBaseUrl()
-    expect(getBaseUrl()).not.toBe('https://evil-netlify.app')
-  })
-
-  it('does NOT match 127.0.0.1.evil.com', async () => {
-    mockWindow('127.0.0.1.evil.com', 'https:')
-    const getBaseUrl = await loadGetBaseUrl()
-    expect(getBaseUrl()).not.toBe('https://127.0.0.1.evil.com')
-  })
+    expect(getBaseUrl()).not.toBe("https://evil-previews.hivecommons.dev");
+  });
+
+  it("does NOT match localhost.evil.com (suffix attack)", async () => {
+    mockWindow("localhost.evil.com", "https:");
+    const getBaseUrl = await loadGetBaseUrl();
+    expect(getBaseUrl()).not.toBe("https://localhost.evil.com");
+  });
+
+  it("does NOT match evil-netlify.app (not a subdomain)", async () => {
+    mockWindow("evil-netlify.app", "https:");
+    const getBaseUrl = await loadGetBaseUrl();
+    expect(getBaseUrl()).not.toBe("https://evil-netlify.app");
+  });
+
+  it("does NOT match 127.0.0.1.evil.com", async () => {
+    mockWindow("127.0.0.1.evil.com", "https:");
+    const getBaseUrl = await loadGetBaseUrl();
+    expect(getBaseUrl()).not.toBe("https://127.0.0.1.evil.com");
+  });
 
   // --- Port stripping ---
 
-  it('strips port before hostname comparison (localhost:5174)', async () => {
-    mockWindow('localhost:5174', 'http:')
-    const getBaseUrl = await loadGetBaseUrl()
-    expect(getBaseUrl()).toBe('http://localhost:5174')
-  })
+  it("strips port before hostname comparison (localhost:5174)", async () => {
+    mockWindow("localhost:5174", "http:");
+    const getBaseUrl = await loadGetBaseUrl();
+    expect(getBaseUrl()).toBe("http://localhost:5174");
+  });
 
   // --- Production fallback ---
 
-  it('returns production URL for hivecommons.dev', async () => {
-    mockWindow('hivecommons.dev', 'https:')
-    const getBaseUrl = await loadGetBaseUrl()
-    expect(getBaseUrl()).toBe('https://docs.hivecommons.dev')
-  })
-})
+  it("returns production URL for hivecommons.dev", async () => {
+    mockWindow("hivecommons.dev", "https:");
+    const getBaseUrl = await loadGetBaseUrl();
+    expect(getBaseUrl()).toBe("https://docs.hivecommons.dev");
+  });
+});
 
-describe('getBaseUrl — server-side (no window)', () => {
+describe("getBaseUrl — server-side (no window)", () => {
   beforeEach(() => {
-    vi.resetModules()
-    restoreWindow()
-  })
-
-  it('returns localhost:3000 in development', async () => {
-    vi.stubEnv('NODE_ENV', 'development')
-    vi.stubEnv('NEXT_PUBLIC_BASE_URL', '')
-    const mod = await import('../lib/url')
-    expect(mod.getBaseUrl()).toBe('http://localhost:3000')
-    vi.unstubAllEnvs()
-  })
-
-  it('returns NEXT_PUBLIC_BASE_URL when set', async () => {
-    vi.stubEnv('NEXT_PUBLIC_BASE_URL', 'https://custom.example.com')
-    const mod = await import('../lib/url')
-    expect(mod.getBaseUrl()).toBe('https://custom.example.com')
-    vi.unstubAllEnvs()
-  })
-})
+    vi.resetModules();
+    restoreWindow();
+  });
+
+  it("returns localhost:3000 in development", async () => {
+    vi.stubEnv("NODE_ENV", "development");
+    vi.stubEnv("NEXT_PUBLIC_BASE_URL", "");
+    const mod = await import("../lib/url");
+    expect(mod.getBaseUrl()).toBe("http://localhost:3000");
+    vi.unstubAllEnvs();
+  });
+
+  it("returns NEXT_PUBLIC_BASE_URL when set", async () => {
+    vi.stubEnv("NEXT_PUBLIC_BASE_URL", "https://custom.example.com");
+    const mod = await import("../lib/url");
+    expect(mod.getBaseUrl()).toBe("https://custom.example.com");
+    vi.unstubAllEnvs();
+  });
+});
diff --git a/src/__tests__/useGithubStats.effect.test.tsx b/src/__tests__/useGithubStats.effect.test.tsx
index 91e6dbf..e91d71f 100644
--- a/src/__tests__/useGithubStats.effect.test.tsx
+++ b/src/__tests__/useGithubStats.effect.test.tsx
@@ -1,6 +1,6 @@
 // @vitest-environment jsdom
-import { describe, it, expect, beforeEach, afterEach, vi } from 'vitest'
-import { renderHook, waitFor } from '@testing-library/react'
+import { describe, it, expect, beforeEach, afterEach, vi } from "vitest";
+import { renderHook, waitFor } from "@testing-library/react";
 
 // Effect-side coverage for src/components/navbar/useGithubStats.ts.
 //
@@ -19,108 +19,122 @@ import { renderHook, waitFor } from '@testing-library/react'
 //   - a response where `data.value` is falsy is skipped (mirrors the
 //     `if (r.value.value)` filter).
 
-const ORIGINAL_FETCH = globalThis.fetch
+const ORIGINAL_FETCH = globalThis.fetch;
 
 const shieldsUrl = (metric: string) =>
-  `https://img.shields.io/github/${metric}/hivecommons/hive.json`
+  `https://img.shields.io/github/${metric}/hivecommons/hive.json`;
 
-function jsonRes(body: unknown, init: { ok?: boolean; status?: number } = {}): Response {
+function jsonRes(
+  body: unknown,
+  init: { ok?: boolean; status?: number } = {}
+): Response {
   return {
     ok: init.ok ?? true,
     status: init.status ?? 200,
     json: async () => body,
-  } as unknown as Response
+  } as unknown as Response;
 }
 
 beforeEach(() => {
-  vi.resetModules()
-})
+  vi.resetModules();
+});
 
 afterEach(() => {
-  globalThis.fetch = ORIGINAL_FETCH
-  vi.restoreAllMocks()
-})
+  globalThis.fetch = ORIGINAL_FETCH;
+  vi.restoreAllMocks();
+});
 
-describe('useGithubStats — effect body under jsdom', () => {
-  it('replaces the fallback with shields.io values when all 3 fetches succeed', async () => {
+describe("useGithubStats — effect body under jsdom", () => {
+  it("replaces the fallback with shields.io values when all 3 fetches succeed", async () => {
     const byUrl: Record<string, string> = {
-      [shieldsUrl('stars')]: '1.2k',
-      [shieldsUrl('forks')]: '340',
-      [shieldsUrl('watchers')]: '42',
-    }
-    const fetchMock = vi.fn(async (url: string) => jsonRes({ value: byUrl[url] }))
-    globalThis.fetch = fetchMock as unknown as typeof fetch
-
-    const { useGithubStats } = await import('../components/navbar/useGithubStats')
-    const { result } = renderHook(() => useGithubStats())
+      [shieldsUrl("stars")]: "1.2k",
+      [shieldsUrl("forks")]: "340",
+      [shieldsUrl("watchers")]: "42",
+    };
+    const fetchMock = vi.fn(async (url: string) =>
+      jsonRes({ value: byUrl[url] })
+    );
+    globalThis.fetch = fetchMock as unknown as typeof fetch;
+
+    const { useGithubStats } =
+      await import("../components/navbar/useGithubStats");
+    const { result } = renderHook(() => useGithubStats());
 
     // Initial synchronous render returns the fallback.
-    expect(result.current).toEqual({ stars: '30', forks: '25', watchers: '1' })
+    expect(result.current).toEqual({ stars: "30", forks: "25", watchers: "1" });
 
     await waitFor(() => {
-      expect(result.current.stars).toBe('1.2k')
-    })
-    expect(result.current).toEqual({ stars: '1.2k', forks: '340', watchers: '42' })
+      expect(result.current.stars).toBe("1.2k");
+    });
+    expect(result.current).toEqual({
+      stars: "1.2k",
+      forks: "340",
+      watchers: "42",
+    });
 
     // Exactly one fetch per metric.
-    expect(fetchMock).toHaveBeenCalledTimes(3)
-    const urls = fetchMock.mock.calls.map((c) => c[0])
+    expect(fetchMock).toHaveBeenCalledTimes(3);
+    const urls = fetchMock.mock.calls.map(c => c[0]);
     expect(urls.sort()).toEqual(
-      [shieldsUrl('stars'), shieldsUrl('forks'), shieldsUrl('watchers')].sort(),
-    )
-  })
+      [shieldsUrl("stars"), shieldsUrl("forks"), shieldsUrl("watchers")].sort()
+    );
+  });
 
-  it('keeps the fallback for a metric whose response is not ok', async () => {
+  it("keeps the fallback for a metric whose response is not ok", async () => {
     const fetchMock = vi.fn(async (url: string) => {
-      if (url === shieldsUrl('stars')) return jsonRes({}, { ok: false, status: 503 })
-      if (url === shieldsUrl('forks')) return jsonRes({ value: '99' })
-      return jsonRes({ value: '7' })
-    })
-    globalThis.fetch = fetchMock as unknown as typeof fetch
+      if (url === shieldsUrl("stars"))
+        return jsonRes({}, { ok: false, status: 503 });
+      if (url === shieldsUrl("forks")) return jsonRes({ value: "99" });
+      return jsonRes({ value: "7" });
+    });
+    globalThis.fetch = fetchMock as unknown as typeof fetch;
 
-    const { useGithubStats } = await import('../components/navbar/useGithubStats')
-    const { result } = renderHook(() => useGithubStats())
+    const { useGithubStats } =
+      await import("../components/navbar/useGithubStats");
+    const { result } = renderHook(() => useGithubStats());
 
     await waitFor(() => {
       // forks + watchers updated, stars stayed at fallback.
-      expect(result.current.forks).toBe('99')
-    })
-    expect(result.current).toEqual({ stars: '30', forks: '99', watchers: '7' })
-  })
+      expect(result.current.forks).toBe("99");
+    });
+    expect(result.current).toEqual({ stars: "30", forks: "99", watchers: "7" });
+  });
 
-  it('leaves state untouched for a rejected fetch (Promise.allSettled skips it)', async () => {
+  it("leaves state untouched for a rejected fetch (Promise.allSettled skips it)", async () => {
     const fetchMock = vi.fn(async (url: string) => {
-      if (url === shieldsUrl('stars')) throw new Error('shields down')
-      if (url === shieldsUrl('forks')) return jsonRes({ value: '10' })
-      return jsonRes({ value: '2' })
-    })
-    globalThis.fetch = fetchMock as unknown as typeof fetch
+      if (url === shieldsUrl("stars")) throw new Error("shields down");
+      if (url === shieldsUrl("forks")) return jsonRes({ value: "10" });
+      return jsonRes({ value: "2" });
+    });
+    globalThis.fetch = fetchMock as unknown as typeof fetch;
 
-    const { useGithubStats } = await import('../components/navbar/useGithubStats')
-    const { result } = renderHook(() => useGithubStats())
+    const { useGithubStats } =
+      await import("../components/navbar/useGithubStats");
+    const { result } = renderHook(() => useGithubStats());
 
     await waitFor(() => {
-      expect(result.current.forks).toBe('10')
-    })
+      expect(result.current.forks).toBe("10");
+    });
     // stars still on fallback because the fulfilled-but-null branch never fires
     // (the throw makes it a rejected result, filtered out by the `fulfilled` guard).
-    expect(result.current).toEqual({ stars: '30', forks: '10', watchers: '2' })
-  })
+    expect(result.current).toEqual({ stars: "30", forks: "10", watchers: "2" });
+  });
 
-  it('keeps the fallback when data.value is falsy (empty string filtered by `if (r.value.value)`)', async () => {
+  it("keeps the fallback when data.value is falsy (empty string filtered by `if (r.value.value)`)", async () => {
     const fetchMock = vi.fn(async (url: string) => {
-      if (url === shieldsUrl('stars')) return jsonRes({ value: '' })
-      if (url === shieldsUrl('forks')) return jsonRes({ value: '55' })
-      return jsonRes({ value: '3' })
-    })
-    globalThis.fetch = fetchMock as unknown as typeof fetch
+      if (url === shieldsUrl("stars")) return jsonRes({ value: "" });
+      if (url === shieldsUrl("forks")) return jsonRes({ value: "55" });
+      return jsonRes({ value: "3" });
+    });
+    globalThis.fetch = fetchMock as unknown as typeof fetch;
 
-    const { useGithubStats } = await import('../components/navbar/useGithubStats')
-    const { result } = renderHook(() => useGithubStats())
+    const { useGithubStats } =
+      await import("../components/navbar/useGithubStats");
+    const { result } = renderHook(() => useGithubStats());
 
     await waitFor(() => {
-      expect(result.current.forks).toBe('55')
-    })
-    expect(result.current).toEqual({ stars: '30', forks: '55', watchers: '3' })
-  })
-})
+      expect(result.current.forks).toBe("55");
+    });
+    expect(result.current).toEqual({ stars: "30", forks: "55", watchers: "3" });
+  });
+});
diff --git a/src/__tests__/useGithubStats.test.tsx b/src/__tests__/useGithubStats.test.tsx
index 1989b22..ccbd61c 100644
--- a/src/__tests__/useGithubStats.test.tsx
+++ b/src/__tests__/useGithubStats.test.tsx
@@ -14,64 +14,68 @@
  * about: the badge must show the fallback values, and the hook must not
  * touch fetch at all.
  */
-import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
-import { createElement } from 'react'
-import { renderToStaticMarkup } from 'react-dom/server'
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+import { createElement } from "react";
+import { renderToStaticMarkup } from "react-dom/server";
 
-import { useGithubStats } from '../components/navbar/useGithubStats'
+import { useGithubStats } from "../components/navbar/useGithubStats";
 
 function Probe() {
-  const stats = useGithubStats()
+  const stats = useGithubStats();
   return createElement(
-    'span',
-    { 'data-stars': stats.stars, 'data-forks': stats.forks, 'data-watchers': stats.watchers },
-    `${stats.stars}|${stats.forks}|${stats.watchers}`,
-  )
+    "span",
+    {
+      "data-stars": stats.stars,
+      "data-forks": stats.forks,
+      "data-watchers": stats.watchers,
+    },
+    `${stats.stars}|${stats.forks}|${stats.watchers}`
+  );
 }
 
-describe('useGithubStats (initial / SSR fallback)', () => {
-  const originalFetch = globalThis.fetch
+describe("useGithubStats (initial / SSR fallback)", () => {
+  const originalFetch = globalThis.fetch;
 
   beforeEach(() => {
     // Guard against accidental network I/O — any fetch invocation during
     // the SSR pass would be a bug (useEffect must not fire).
     globalThis.fetch = vi.fn(() => {
-      throw new Error('fetch should not be called during SSR')
-    }) as unknown as typeof fetch
-  })
+      throw new Error("fetch should not be called during SSR");
+    }) as unknown as typeof fetch;
+  });
 
   afterEach(() => {
-    globalThis.fetch = originalFetch
-    vi.restoreAllMocks()
-  })
+    globalThis.fetch = originalFetch;
+    vi.restoreAllMocks();
+  });
 
-  it('exposes the documented default stars/forks/watchers fallback on first render', () => {
-    const html = renderToStaticMarkup(createElement(Probe))
-    expect(html).toContain('data-stars="30"')
-    expect(html).toContain('data-forks="25"')
-    expect(html).toContain('data-watchers="1"')
-    expect(html).toContain('30|25|1')
-  })
+  it("exposes the documented default stars/forks/watchers fallback on first render", () => {
+    const html = renderToStaticMarkup(createElement(Probe));
+    expect(html).toContain('data-stars="30"');
+    expect(html).toContain('data-forks="25"');
+    expect(html).toContain('data-watchers="1"');
+    expect(html).toContain("30|25|1");
+  });
 
-  it('does not invoke fetch during the SSR pass (useEffect deferred to client)', () => {
-    renderToStaticMarkup(createElement(Probe))
-    expect(globalThis.fetch).not.toHaveBeenCalled()
-  })
+  it("does not invoke fetch during the SSR pass (useEffect deferred to client)", () => {
+    renderToStaticMarkup(createElement(Probe));
+    expect(globalThis.fetch).not.toHaveBeenCalled();
+  });
 
-  it('returns string values for every stat (badge templates rely on string concat)', () => {
+  it("returns string values for every stat (badge templates rely on string concat)", () => {
     // Assert the type contract by rendering and re-parsing the attribute
     // values, which must be non-empty strings on first paint.
-    const html = renderToStaticMarkup(createElement(Probe))
-    const match = html.match(/(\d+)\|(\d+)\|(\d+)/)
-    expect(match).not.toBeNull()
-    const [, stars, forks, watchers] = match!
-    expect(typeof stars).toBe('string')
-    expect(typeof forks).toBe('string')
-    expect(typeof watchers).toBe('string')
+    const html = renderToStaticMarkup(createElement(Probe));
+    const match = html.match(/(\d+)\|(\d+)\|(\d+)/);
+    expect(match).not.toBeNull();
+    const [, stars, forks, watchers] = match!;
+    expect(typeof stars).toBe("string");
+    expect(typeof forks).toBe("string");
+    expect(typeof watchers).toBe("string");
     // And the defaults are non-zero — a "0 stars" fallback would look
     // like a broken repo in the header.
-    expect(Number(stars)).toBeGreaterThan(0)
-    expect(Number(forks)).toBeGreaterThan(0)
-    expect(Number(watchers)).toBeGreaterThan(0)
-  })
-})
+    expect(Number(stars)).toBeGreaterThan(0);
+    expect(Number(forks)).toBeGreaterThan(0);
+    expect(Number(watchers)).toBeGreaterThan(0);
+  });
+});
diff --git a/src/__tests__/useSharedConfig.fetch.test.ts b/src/__tests__/useSharedConfig.fetch.test.ts
index e518707..3bc2881 100644
--- a/src/__tests__/useSharedConfig.fetch.test.ts
+++ b/src/__tests__/useSharedConfig.fetch.test.ts
@@ -1,5 +1,5 @@
-import { describe, it, expect, vi, beforeEach, afterEach } from 'vitest'
-import type { SharedConfig } from '../hooks/useSharedConfig'
+import { describe, it, expect, vi, beforeEach, afterEach } from "vitest";
+import type { SharedConfig } from "../hooks/useSharedConfig";
 
 // Closes previously-uncovered branches in src/hooks/useSharedConfig.ts:
 //
@@ -21,208 +21,247 @@ import type { SharedConfig } from '../hooks/useSharedConfig'
 const localConfig: SharedConfig = {
   versions: {
     kubestellar: {
-      latest: { label: 'v0.30.0 (Latest)', branch: 'docs/0.30.0', isDefault: true },
+      latest: {
+        label: "v0.30.0 (Latest)",
+        branch: "docs/0.30.0",
+        isDefault: true,
+      },
     },
   },
   projects: {
-    kubestellar: { name: 'KubeStellar', basePath: '', currentVersion: '0.30.0' },
+    kubestellar: {
+      name: "KubeStellar",
+      basePath: "",
+      currentVersion: "0.30.0",
+    },
   },
-  relatedProjects: [{ title: 'Local', href: '/docs/local' }],
-  editBaseUrls: { kubestellar: 'https://local.example/edit' },
-  surveyUrl: 'https://local.example/survey',
-  updatedAt: '2026-06-25T12:00:00Z',
-}
+  relatedProjects: [{ title: "Local", href: "/docs/local" }],
+  editBaseUrls: { kubestellar: "https://local.example/edit" },
+  surveyUrl: "https://local.example/survey",
+  updatedAt: "2026-06-25T12:00:00Z",
+};
 
 const prodConfig: SharedConfig = {
   versions: {
     kubestellar: {
-      latest: { label: 'v0.30.0 (Latest)', branch: 'docs/0.30.0', isDefault: true },
-      main: { label: 'main (dev)', branch: 'main', isDefault: false, isDev: true },
+      latest: {
+        label: "v0.30.0 (Latest)",
+        branch: "docs/0.30.0",
+        isDefault: true,
+      },
+      main: {
+        label: "main (dev)",
+        branch: "main",
+        isDefault: false,
+        isDev: true,
+      },
     },
     a2a: {
-      latest: { label: 'v0.1.0 (Latest)', branch: 'docs/a2a/0.1.0', isDefault: true },
+      latest: {
+        label: "v0.1.0 (Latest)",
+        branch: "docs/a2a/0.1.0",
+        isDefault: true,
+      },
     },
   },
   projects: {
-    kubestellar: { name: 'KubeStellar', basePath: '', currentVersion: '0.30.0' },
-    a2a: { name: 'A2A', basePath: 'a2a', currentVersion: '0.1.0' },
+    kubestellar: {
+      name: "KubeStellar",
+      basePath: "",
+      currentVersion: "0.30.0",
+    },
+    a2a: { name: "A2A", basePath: "a2a", currentVersion: "0.1.0" },
   },
-  relatedProjects: [{ title: 'Prod', href: '/docs/prod' }],
-  editBaseUrls: { a2a: 'https://prod.example/a2a' },
-  surveyUrl: 'https://prod.example/survey',
-  updatedAt: '2026-05-01T00:00:00Z',
-}
+  relatedProjects: [{ title: "Prod", href: "/docs/prod" }],
+  editBaseUrls: { a2a: "https://prod.example/a2a" },
+  surveyUrl: "https://prod.example/survey",
+  updatedAt: "2026-05-01T00:00:00Z",
+};
 
 function stubFetch(handler: (url: string) => Promise<Response> | Response) {
-  vi.stubGlobal('fetch', vi.fn((url: string) => Promise.resolve(handler(url))))
+  vi.stubGlobal(
+    "fetch",
+    vi.fn((url: string) => Promise.resolve(handler(url)))
+  );
 }
 
 function jsonRes(body: unknown, ok: boolean = true): Response {
   return {
     ok,
     json: async () => body,
-  } as unknown as Response
+  } as unknown as Response;
 }
 
 beforeEach(() => {
-  vi.resetModules()
-  vi.stubGlobal('console', { ...console, warn: vi.fn() })
-})
+  vi.resetModules();
+  vi.stubGlobal("console", { ...console, warn: vi.fn() });
+});
 
 afterEach(() => {
-  vi.unstubAllGlobals()
-})
-
-describe('fetchConfig — merge when both sources succeed', () => {
-  it('prefers local values but unions per-project version keys from production', async () => {
-    stubFetch((url) => {
-      if (url === '/config/shared.json') return jsonRes(localConfig)
-      return jsonRes(prodConfig)
-    })
-    const { fetchConfig } = await import('../hooks/useSharedConfig')
-    const cfg = await fetchConfig(true)
-    expect(cfg).not.toBeNull()
+  vi.unstubAllGlobals();
+});
+
+describe("fetchConfig — merge when both sources succeed", () => {
+  it("prefers local values but unions per-project version keys from production", async () => {
+    stubFetch(url => {
+      if (url === "/config/shared.json") return jsonRes(localConfig);
+      return jsonRes(prodConfig);
+    });
+    const { fetchConfig } = await import("../hooks/useSharedConfig");
+    const cfg = await fetchConfig(true);
+    expect(cfg).not.toBeNull();
 
     // Local's kubestellar/latest wins (identical here), and production's
     // kubestellar/main survives the union — the mergeVersionMaps arm.
-    expect(cfg!.versions.kubestellar.latest.branch).toBe('docs/0.30.0')
-    expect(cfg!.versions.kubestellar.main.branch).toBe('main')
+    expect(cfg!.versions.kubestellar.latest.branch).toBe("docs/0.30.0");
+    expect(cfg!.versions.kubestellar.main.branch).toBe("main");
     // Production-only project a2a is preserved by the same union.
-    expect(cfg!.versions.a2a.latest.branch).toBe('docs/a2a/0.1.0')
+    expect(cfg!.versions.a2a.latest.branch).toBe("docs/a2a/0.1.0");
 
     // Local relatedProjects is non-empty -> local wins.
-    expect(cfg!.relatedProjects).toEqual([{ title: 'Local', href: '/docs/local' }])
+    expect(cfg!.relatedProjects).toEqual([
+      { title: "Local", href: "/docs/local" },
+    ]);
 
     // Local surveyUrl truthy -> local wins.
-    expect(cfg!.surveyUrl).toBe('https://local.example/survey')
+    expect(cfg!.surveyUrl).toBe("https://local.example/survey");
 
     // Newer local timestamp -> merged updatedAt should be local's.
-    expect(cfg!.updatedAt).toBe('2026-06-25T12:00:00Z')
-  })
-
-  it('falls back to production relatedProjects when local list is empty', async () => {
-    const localEmpty = { ...localConfig, relatedProjects: [] }
-    stubFetch((url) => {
-      if (url === '/config/shared.json') return jsonRes(localEmpty)
-      return jsonRes(prodConfig)
-    })
-    const { fetchConfig } = await import('../hooks/useSharedConfig')
-    const cfg = await fetchConfig(true)
-    expect(cfg!.relatedProjects).toEqual([{ title: 'Prod', href: '/docs/prod' }])
-  })
-
-  it('picks the newer-timestamped side as the primary in merge', async () => {
+    expect(cfg!.updatedAt).toBe("2026-06-25T12:00:00Z");
+  });
+
+  it("falls back to production relatedProjects when local list is empty", async () => {
+    const localEmpty = { ...localConfig, relatedProjects: [] };
+    stubFetch(url => {
+      if (url === "/config/shared.json") return jsonRes(localEmpty);
+      return jsonRes(prodConfig);
+    });
+    const { fetchConfig } = await import("../hooks/useSharedConfig");
+    const cfg = await fetchConfig(true);
+    expect(cfg!.relatedProjects).toEqual([
+      { title: "Prod", href: "/docs/prod" },
+    ]);
+  });
+
+  it("picks the newer-timestamped side as the primary in merge", async () => {
     // Flip freshness: production is newer than local. The merge
     // reverses argument order, so production wins on relatedProjects
     // and surveyUrl.
-    const staleLocal = { ...localConfig, updatedAt: '2020-01-01T00:00:00Z' }
-    stubFetch((url) => {
-      if (url === '/config/shared.json') return jsonRes(staleLocal)
-      return jsonRes({ ...prodConfig, updatedAt: '2026-08-01T00:00:00Z' })
-    })
-    const { fetchConfig } = await import('../hooks/useSharedConfig')
-    const cfg = await fetchConfig(true)
-    expect(cfg!.relatedProjects[0].title).toBe('Prod')
-    expect(cfg!.updatedAt).toBe('2026-08-01T00:00:00Z')
-  })
-
-  it('treats missing/invalid updatedAt as timestamp 0', async () => {
+    const staleLocal = { ...localConfig, updatedAt: "2020-01-01T00:00:00Z" };
+    stubFetch(url => {
+      if (url === "/config/shared.json") return jsonRes(staleLocal);
+      return jsonRes({ ...prodConfig, updatedAt: "2026-08-01T00:00:00Z" });
+    });
+    const { fetchConfig } = await import("../hooks/useSharedConfig");
+    const cfg = await fetchConfig(true);
+    expect(cfg!.relatedProjects[0].title).toBe("Prod");
+    expect(cfg!.updatedAt).toBe("2026-08-01T00:00:00Z");
+  });
+
+  it("treats missing/invalid updatedAt as timestamp 0", async () => {
     // Local has no updatedAt -> getConfigTimestamp returns 0, so
     // production (any real date) is newer and becomes primary.
-    const noStamp: any = { ...localConfig }
-    delete noStamp.updatedAt
-    stubFetch((url) => {
-      if (url === '/config/shared.json') return jsonRes(noStamp)
-      return jsonRes({ ...prodConfig, updatedAt: '2026-08-01T00:00:00Z' })
-    })
-    const { fetchConfig } = await import('../hooks/useSharedConfig')
-    const cfg = await fetchConfig(true)
-    expect(cfg!.updatedAt).toBe('2026-08-01T00:00:00Z')
+    const noStamp: any = { ...localConfig };
+    delete noStamp.updatedAt;
+    stubFetch(url => {
+      if (url === "/config/shared.json") return jsonRes(noStamp);
+      return jsonRes({ ...prodConfig, updatedAt: "2026-08-01T00:00:00Z" });
+    });
+    const { fetchConfig } = await import("../hooks/useSharedConfig");
+    const cfg = await fetchConfig(true);
+    expect(cfg!.updatedAt).toBe("2026-08-01T00:00:00Z");
 
     // Also exercise the Number.isNaN arm: an unparseable updatedAt
     // string should be treated as timestamp 0 too.
-    vi.resetModules()
-    vi.unstubAllGlobals()
-    stubFetch((url) => {
-      if (url === '/config/shared.json') return jsonRes({ ...localConfig, updatedAt: 'not-a-date' })
-      return jsonRes({ ...prodConfig, updatedAt: '2026-08-01T00:00:00Z' })
-    })
-    const { fetchConfig: fc2 } = await import('../hooks/useSharedConfig')
-    const cfg2 = await fc2(true)
-    expect(cfg2!.updatedAt).toBe('2026-08-01T00:00:00Z')
-  })
-})
-
-describe('fetchConfig — single-source fallback', () => {
-  it('returns local config when production fetch is not ok', async () => {
-    stubFetch((url) => {
-      if (url === '/config/shared.json') return jsonRes(localConfig)
-      return jsonRes(null, false) // production non-2xx -> fetchConfigJson returns null
-    })
-    const { fetchConfig } = await import('../hooks/useSharedConfig')
-    const cfg = await fetchConfig(true)
-    expect(cfg).toEqual(localConfig)
-  })
-
-  it('returns production config when local fetch rejects', async () => {
+    vi.resetModules();
+    vi.unstubAllGlobals();
+    stubFetch(url => {
+      if (url === "/config/shared.json")
+        return jsonRes({ ...localConfig, updatedAt: "not-a-date" });
+      return jsonRes({ ...prodConfig, updatedAt: "2026-08-01T00:00:00Z" });
+    });
+    const { fetchConfig: fc2 } = await import("../hooks/useSharedConfig");
+    const cfg2 = await fc2(true);
+    expect(cfg2!.updatedAt).toBe("2026-08-01T00:00:00Z");
+  });
+});
+
+describe("fetchConfig — single-source fallback", () => {
+  it("returns local config when production fetch is not ok", async () => {
+    stubFetch(url => {
+      if (url === "/config/shared.json") return jsonRes(localConfig);
+      return jsonRes(null, false); // production non-2xx -> fetchConfigJson returns null
+    });
+    const { fetchConfig } = await import("../hooks/useSharedConfig");
+    const cfg = await fetchConfig(true);
+    expect(cfg).toEqual(localConfig);
+  });
+
+  it("returns production config when local fetch rejects", async () => {
     vi.stubGlobal(
-      'fetch',
+      "fetch",
       vi.fn((url: string) => {
-        if (url === '/config/shared.json') {
-          return Promise.reject(new Error('local network dead'))
+        if (url === "/config/shared.json") {
+          return Promise.reject(new Error("local network dead"));
         }
-        return Promise.resolve(jsonRes(prodConfig))
+        return Promise.resolve(jsonRes(prodConfig));
       })
-    )
-    const { fetchConfig } = await import('../hooks/useSharedConfig')
-    const cfg = await fetchConfig(true)
-    expect(cfg).toEqual(prodConfig)
-  })
+    );
+    const { fetchConfig } = await import("../hooks/useSharedConfig");
+    const cfg = await fetchConfig(true);
+    expect(cfg).toEqual(prodConfig);
+  });
 
-  it('returns null when both sources fail', async () => {
+  it("returns null when both sources fail", async () => {
     vi.stubGlobal(
-      'fetch',
-      vi.fn(() => Promise.reject(new Error('all dead')))
-    )
-    const { fetchConfig } = await import('../hooks/useSharedConfig')
-    const cfg = await fetchConfig(true)
-    expect(cfg).toBeNull()
-  })
-})
-
-describe('fetchConfig — cache & in-flight de-dup', () => {
-  it('reuses cached config on subsequent calls without refetching', async () => {
+      "fetch",
+      vi.fn(() => Promise.reject(new Error("all dead")))
+    );
+    const { fetchConfig } = await import("../hooks/useSharedConfig");
+    const cfg = await fetchConfig(true);
+    expect(cfg).toBeNull();
+  });
+});
+
+describe("fetchConfig — cache & in-flight de-dup", () => {
+  it("reuses cached config on subsequent calls without refetching", async () => {
     const fetchMock = vi.fn((url: string) =>
-      Promise.resolve(url === '/config/shared.json' ? jsonRes(localConfig) : jsonRes(prodConfig))
-    )
-    vi.stubGlobal('fetch', fetchMock)
-    const { fetchConfig } = await import('../hooks/useSharedConfig')
-    const first = await fetchConfig(true)
-    expect(first).not.toBeNull()
-    const callsAfterFirst = fetchMock.mock.calls.length
-
-    const second = await fetchConfig() // no forceRefresh -> cache hit
-    expect(second).toBe(first)
-    expect(fetchMock.mock.calls.length).toBe(callsAfterFirst)
-  })
-
-  it('returns the same promise for concurrent in-flight calls', async () => {
+      Promise.resolve(
+        url === "/config/shared.json"
+          ? jsonRes(localConfig)
+          : jsonRes(prodConfig)
+      )
+    );
+    vi.stubGlobal("fetch", fetchMock);
+    const { fetchConfig } = await import("../hooks/useSharedConfig");
+    const first = await fetchConfig(true);
+    expect(first).not.toBeNull();
+    const callsAfterFirst = fetchMock.mock.calls.length;
+
+    const second = await fetchConfig(); // no forceRefresh -> cache hit
+    expect(second).toBe(first);
+    expect(fetchMock.mock.calls.length).toBe(callsAfterFirst);
+  });
+
+  it("returns the same promise for concurrent in-flight calls", async () => {
     // Delay the fetch so both calls land while the promise is pending.
-    let resolveLocal!: (r: Response) => void
-    let resolveProd!: (r: Response) => void
-    const localPromise = new Promise<Response>((r) => (resolveLocal = r))
-    const prodPromise = new Promise<Response>((r) => (resolveProd = r))
+    let resolveLocal!: (r: Response) => void;
+    let resolveProd!: (r: Response) => void;
+    const localPromise = new Promise<Response>(r => (resolveLocal = r));
+    const prodPromise = new Promise<Response>(r => (resolveProd = r));
     vi.stubGlobal(
-      'fetch',
-      vi.fn((url: string) => (url === '/config/shared.json' ? localPromise : prodPromise))
-    )
-    const { fetchConfig } = await import('../hooks/useSharedConfig')
-    const a = fetchConfig(true)
-    const b = fetchConfig(true)
+      "fetch",
+      vi.fn((url: string) =>
+        url === "/config/shared.json" ? localPromise : prodPromise
+      )
+    );
+    const { fetchConfig } = await import("../hooks/useSharedConfig");
+    const a = fetchConfig(true);
+    const b = fetchConfig(true);
     // Fire off resolves after both promises are registered.
-    resolveLocal(jsonRes(localConfig))
-    resolveProd(jsonRes(prodConfig))
-    const [ra, rb] = await Promise.all([a, b])
-    expect(ra).toBe(rb)
-  })
-})
+    resolveLocal(jsonRes(localConfig));
+    resolveProd(jsonRes(prodConfig));
+    const [ra, rb] = await Promise.all([a, b]);
+    expect(ra).toBe(rb);
+  });
+});
diff --git a/src/__tests__/useSharedConfig.hook.test.tsx b/src/__tests__/useSharedConfig.hook.test.tsx
index dafd094..0f46e17 100644
--- a/src/__tests__/useSharedConfig.hook.test.tsx
+++ b/src/__tests__/useSharedConfig.hook.test.tsx
@@ -1,7 +1,7 @@
 // @vitest-environment jsdom
-import { describe, it, expect, beforeEach, afterEach, vi } from 'vitest'
-import { act, renderHook, waitFor } from '@testing-library/react'
-import type { SharedConfig } from '../hooks/useSharedConfig'
+import { describe, it, expect, beforeEach, afterEach, vi } from "vitest";
+import { act, renderHook, waitFor } from "@testing-library/react";
+import type { SharedConfig } from "../hooks/useSharedConfig";
 
 /**
  * Coverage for the useSharedConfig React hook body — the useState
@@ -20,8 +20,8 @@ import type { SharedConfig } from '../hooks/useSharedConfig'
  * cacheTimestamp / fetchPromise closure state) and mock globalThis.fetch.
  */
 
-const LOCAL_URL = '/config/shared.json'
-const PROD_URL = 'https://docs.hivecommons.dev/config/shared.json'
+const LOCAL_URL = "/config/shared.json";
+const PROD_URL = "https://docs.hivecommons.dev/config/shared.json";
 
 function makeConfig(overrides: Partial<SharedConfig> = {}): SharedConfig {
   return {
@@ -29,9 +29,9 @@ function makeConfig(overrides: Partial<SharedConfig> = {}): SharedConfig {
     projects: {},
     relatedProjects: [],
     editBaseUrls: {},
-    updatedAt: '2026-07-01T00:00:00.000Z',
+    updatedAt: "2026-07-01T00:00:00.000Z",
     ...overrides,
-  }
+  };
 }
 
 function ok(body: unknown): Response {
@@ -39,7 +39,7 @@ function ok(body: unknown): Response {
     ok: true,
     status: 200,
     json: async () => body,
-  } as unknown as Response
+  } as unknown as Response;
 }
 
 function notOk(status = 404): Response {
@@ -47,135 +47,137 @@ function notOk(status = 404): Response {
     ok: false,
     status,
     json: async () => ({}),
-  } as unknown as Response
+  } as unknown as Response;
 }
 
 async function importFresh() {
-  vi.resetModules()
-  return await import('../hooks/useSharedConfig')
+  vi.resetModules();
+  return await import("../hooks/useSharedConfig");
 }
 
-let fetchMock: ReturnType<typeof vi.fn>
-const ORIGINAL_FETCH = globalThis.fetch
+let fetchMock: ReturnType<typeof vi.fn>;
+const ORIGINAL_FETCH = globalThis.fetch;
 
 beforeEach(() => {
-  fetchMock = vi.fn()
-  globalThis.fetch = fetchMock as unknown as typeof fetch
-})
+  fetchMock = vi.fn();
+  globalThis.fetch = fetchMock as unknown as typeof fetch;
+});
 
 afterEach(() => {
-  globalThis.fetch = ORIGINAL_FETCH
-  vi.restoreAllMocks()
-})
+  globalThis.fetch = ORIGINAL_FETCH;
+  vi.restoreAllMocks();
+});
 
-describe('useSharedConfig — cold cache (fetch path)', () => {
-  it('starts in loading=true, config=null and resolves to loading=false, config=<merged>', async () => {
-    const cfg = makeConfig({ surveyUrl: 'https://survey.example' })
+describe("useSharedConfig — cold cache (fetch path)", () => {
+  it("starts in loading=true, config=null and resolves to loading=false, config=<merged>", async () => {
+    const cfg = makeConfig({ surveyUrl: "https://survey.example" });
     fetchMock.mockImplementation(async (url: string) => {
-      if (url === LOCAL_URL) return ok(cfg)
-      if (url === PROD_URL) return notOk()
-      throw new Error(`unexpected url ${url}`)
-    })
+      if (url === LOCAL_URL) return ok(cfg);
+      if (url === PROD_URL) return notOk();
+      throw new Error(`unexpected url ${url}`);
+    });
 
-    const mod = await importFresh()
-    const { result } = renderHook(() => mod.useSharedConfig())
+    const mod = await importFresh();
+    const { result } = renderHook(() => mod.useSharedConfig());
 
     // useEffect has not yet run through fetch — but useState init reads
     // isCacheValid() which is false, so config starts null and loading=true.
-    expect(result.current.config).toBeNull()
-    expect(result.current.loading).toBe(true)
-    expect(result.current.error).toBeNull()
-
-    await waitFor(() => expect(result.current.loading).toBe(false))
-    expect(result.current.error).toBeNull()
-    expect(result.current.config?.surveyUrl).toBe('https://survey.example')
-  })
-})
-
-describe('useSharedConfig — warm cache (module-scoped)', () => {
-  it('reuses configCache when a prior render populated it (isCacheValid=true, no new fetch)', async () => {
-    const cfg = makeConfig({ surveyUrl: 'https://cached.example' })
+    expect(result.current.config).toBeNull();
+    expect(result.current.loading).toBe(true);
+    expect(result.current.error).toBeNull();
+
+    await waitFor(() => expect(result.current.loading).toBe(false));
+    expect(result.current.error).toBeNull();
+    expect(result.current.config?.surveyUrl).toBe("https://survey.example");
+  });
+});
+
+describe("useSharedConfig — warm cache (module-scoped)", () => {
+  it("reuses configCache when a prior render populated it (isCacheValid=true, no new fetch)", async () => {
+    const cfg = makeConfig({ surveyUrl: "https://cached.example" });
     fetchMock.mockImplementation(async (url: string) => {
-      if (url === LOCAL_URL) return ok(cfg)
-      if (url === PROD_URL) return notOk()
-      throw new Error(`unexpected url ${url}`)
-    })
+      if (url === LOCAL_URL) return ok(cfg);
+      if (url === PROD_URL) return notOk();
+      throw new Error(`unexpected url ${url}`);
+    });
 
-    const mod = await importFresh()
+    const mod = await importFresh();
 
     // Prime the cache
-    const first = renderHook(() => mod.useSharedConfig())
-    await waitFor(() => expect(first.result.current.loading).toBe(false))
-    expect(fetchMock).toHaveBeenCalled()
+    const first = renderHook(() => mod.useSharedConfig());
+    await waitFor(() => expect(first.result.current.loading).toBe(false));
+    expect(fetchMock).toHaveBeenCalled();
 
     // Reset the fetch counter, mount a fresh hook — should NOT fetch again.
-    fetchMock.mockClear()
-    const second = renderHook(() => mod.useSharedConfig())
+    fetchMock.mockClear();
+    const second = renderHook(() => mod.useSharedConfig());
 
     // useState init reads isCacheValid()===true, so config is already
     // populated on the very first render.
-    expect(second.result.current.config?.surveyUrl).toBe('https://cached.example')
-    expect(second.result.current.loading).toBe(false)
+    expect(second.result.current.config?.surveyUrl).toBe(
+      "https://cached.example"
+    );
+    expect(second.result.current.loading).toBe(false);
 
     // The useEffect early-return arm runs and calls setConfig/setLoading
     // synchronously; it must not fetch.
-    await waitFor(() => expect(second.result.current.loading).toBe(false))
-    expect(fetchMock).not.toHaveBeenCalled()
-  })
-})
+    await waitFor(() => expect(second.result.current.loading).toBe(false));
+    expect(fetchMock).not.toHaveBeenCalled();
+  });
+});
 
-describe('useSharedConfig — null-config fallback (fetchConfig resolves to null)', () => {
-  it('when both LOCAL and PROD fetches fail (fetchConfig returns null), config stays null and loading flips off', async () => {
+describe("useSharedConfig — null-config fallback (fetchConfig resolves to null)", () => {
+  it("when both LOCAL and PROD fetches fail (fetchConfig returns null), config stays null and loading flips off", async () => {
     // Note: fetchConfig catches per-URL errors internally and returns
     // null rather than rejecting, so the .catch(err => setError) arm
     // of useSharedConfig is unreachable from this level. The observable
     // behaviour is: config=null, loading=false, error=null.
     fetchMock.mockImplementation(async () => {
-      throw new Error('network down')
-    })
-
-    const mod = await importFresh()
-    const { result } = renderHook(() => mod.useSharedConfig())
-
-    await waitFor(() => expect(result.current.loading).toBe(false))
-    expect(result.current.config).toBeNull()
-    expect(result.current.error).toBeNull()
-  })
-})
-
-describe('useSharedConfig — mounted-flag cleanup', () => {
-  it('does not update state after the component unmounts before fetch resolves', async () => {
-    let resolveLocal!: (r: Response) => void
-    const localPromise = new Promise<Response>((res) => {
-      resolveLocal = res
-    })
+      throw new Error("network down");
+    });
+
+    const mod = await importFresh();
+    const { result } = renderHook(() => mod.useSharedConfig());
+
+    await waitFor(() => expect(result.current.loading).toBe(false));
+    expect(result.current.config).toBeNull();
+    expect(result.current.error).toBeNull();
+  });
+});
+
+describe("useSharedConfig — mounted-flag cleanup", () => {
+  it("does not update state after the component unmounts before fetch resolves", async () => {
+    let resolveLocal!: (r: Response) => void;
+    const localPromise = new Promise<Response>(res => {
+      resolveLocal = res;
+    });
     fetchMock.mockImplementation(async (url: string) => {
-      if (url === LOCAL_URL) return localPromise
-      if (url === PROD_URL) return notOk()
-      throw new Error(`unexpected url ${url}`)
-    })
+      if (url === LOCAL_URL) return localPromise;
+      if (url === PROD_URL) return notOk();
+      throw new Error(`unexpected url ${url}`);
+    });
 
-    const mod = await importFresh()
-    const { result, unmount } = renderHook(() => mod.useSharedConfig())
+    const mod = await importFresh();
+    const { result, unmount } = renderHook(() => mod.useSharedConfig());
 
-    expect(result.current.loading).toBe(true)
+    expect(result.current.loading).toBe(true);
 
     // Unmount BEFORE the fetch resolves — the cleanup sets mounted=false
     // so the .then handler must not call setConfig/setLoading.
-    unmount()
+    unmount();
     await act(async () => {
-      resolveLocal(ok(makeConfig({ surveyUrl: 'https://late.example' })))
+      resolveLocal(ok(makeConfig({ surveyUrl: "https://late.example" })));
       // Give the microtask queue a chance to flush the .then handler.
-      await Promise.resolve()
-      await Promise.resolve()
-    })
+      await Promise.resolve();
+      await Promise.resolve();
+    });
 
     // result.current is the last-rendered value from before unmount.
     // If the cleanup was broken we'd get a React "setState on unmounted
     // component" warning; renderHook would still return the last
     // pre-unmount snapshot, but the important assertion is that no
     // exception was thrown and the loading value never flipped.
-    expect(result.current.loading).toBe(true)
-    expect(result.current.config).toBeNull()
-  })
-})
+    expect(result.current.loading).toBe(true);
+    expect(result.current.config).toBeNull();
+  });
+});
diff --git a/src/__tests__/useSharedConfig.merge-fallback-branches.test.ts b/src/__tests__/useSharedConfig.merge-fallback-branches.test.ts
index 070e09b..607c8f0 100644
--- a/src/__tests__/useSharedConfig.merge-fallback-branches.test.ts
+++ b/src/__tests__/useSharedConfig.merge-fallback-branches.test.ts
@@ -1,5 +1,5 @@
-import { describe, it, expect, vi, beforeEach, afterEach } from 'vitest'
-import type { SharedConfig } from '../hooks/useSharedConfig'
+import { describe, it, expect, vi, beforeEach, afterEach } from "vitest";
+import type { SharedConfig } from "../hooks/useSharedConfig";
 
 // Extension of useSharedConfig.fetch.test.ts targeting the last
 // uncovered nullish-coalescing arms inside mergeSharedConfigs
@@ -17,137 +17,144 @@ import type { SharedConfig } from '../hooks/useSharedConfig'
 // through Partial<SharedConfig> to model the "server returned an
 // incomplete payload" real-world case).
 
-const baseVersions: SharedConfig['versions'] = {
+const baseVersions: SharedConfig["versions"] = {
   kubestellar: {
-    latest: { label: 'v0.30.0', branch: 'docs/0.30.0', isDefault: true },
+    latest: { label: "v0.30.0", branch: "docs/0.30.0", isDefault: true },
   },
-}
+};
 
 const baseLocal: SharedConfig = {
   versions: baseVersions,
   projects: {
-    kubestellar: { name: 'KubeStellar', basePath: '', currentVersion: '0.30.0' },
+    kubestellar: {
+      name: "KubeStellar",
+      basePath: "",
+      currentVersion: "0.30.0",
+    },
   },
-  relatedProjects: [{ title: 'Local', href: '/docs/local' }],
-  editBaseUrls: { kubestellar: 'https://local.example/edit' },
-  surveyUrl: 'https://local.example/survey',
+  relatedProjects: [{ title: "Local", href: "/docs/local" }],
+  editBaseUrls: { kubestellar: "https://local.example/edit" },
+  surveyUrl: "https://local.example/survey",
   // Newer -> local is `primary` in mergeSharedConfigs.
-  updatedAt: '2026-06-25T12:00:00Z',
-}
+  updatedAt: "2026-06-25T12:00:00Z",
+};
 
 const baseProd: SharedConfig = {
   versions: baseVersions,
   projects: {
-    a2a: { name: 'A2A', basePath: 'a2a', currentVersion: '0.1.0' },
+    a2a: { name: "A2A", basePath: "a2a", currentVersion: "0.1.0" },
   },
-  relatedProjects: [{ title: 'Prod', href: '/docs/prod' }],
-  editBaseUrls: { a2a: 'https://prod.example/a2a' },
-  surveyUrl: 'https://prod.example/survey',
-  updatedAt: '2026-05-01T00:00:00Z',
-}
+  relatedProjects: [{ title: "Prod", href: "/docs/prod" }],
+  editBaseUrls: { a2a: "https://prod.example/a2a" },
+  surveyUrl: "https://prod.example/survey",
+  updatedAt: "2026-05-01T00:00:00Z",
+};
 
 function stubFetch(handler: (url: string) => Promise<Response> | Response) {
-  vi.stubGlobal('fetch', vi.fn((url: string) => Promise.resolve(handler(url))))
+  vi.stubGlobal(
+    "fetch",
+    vi.fn((url: string) => Promise.resolve(handler(url)))
+  );
 }
 
 function jsonRes(body: unknown, ok: boolean = true): Response {
-  return { ok, json: async () => body } as unknown as Response
+  return { ok, json: async () => body } as unknown as Response;
 }
 
 beforeEach(() => {
-  vi.resetModules()
-  vi.stubGlobal('console', { ...console, warn: vi.fn() })
-})
+  vi.resetModules();
+  vi.stubGlobal("console", { ...console, warn: vi.fn() });
+});
 
 afterEach(() => {
-  vi.unstubAllGlobals()
-})
-
-describe('mergeSharedConfigs — nullish-coalescing fallback arms', () => {
-  it('falls back to {} when primary.projects is missing (line 81 ?? arm)', async () => {
-    const localNoProjects: Partial<SharedConfig> = { ...baseLocal }
-    delete (localNoProjects as any).projects
-
-    stubFetch((url) => {
-      if (url === '/config/shared.json') return jsonRes(localNoProjects)
-      return jsonRes(baseProd)
-    })
-    const { fetchConfig } = await import('../hooks/useSharedConfig')
-    const cfg = await fetchConfig(true)
+  vi.unstubAllGlobals();
+});
+
+describe("mergeSharedConfigs — nullish-coalescing fallback arms", () => {
+  it("falls back to {} when primary.projects is missing (line 81 ?? arm)", async () => {
+    const localNoProjects: Partial<SharedConfig> = { ...baseLocal };
+    delete (localNoProjects as any).projects;
+
+    stubFetch(url => {
+      if (url === "/config/shared.json") return jsonRes(localNoProjects);
+      return jsonRes(baseProd);
+    });
+    const { fetchConfig } = await import("../hooks/useSharedConfig");
+    const cfg = await fetchConfig(true);
     // Only secondary (prod) projects should survive; the primary
     // spread degrades to `{}` and adds nothing.
-    expect(Object.keys(cfg!.projects).sort()).toEqual(['a2a'])
-    expect(cfg!.projects.a2a.name).toBe('A2A')
-  })
-
-  it('falls back to {} when secondary.projects is missing (line 80 ?? arm)', async () => {
-    const prodNoProjects: Partial<SharedConfig> = { ...baseProd }
-    delete (prodNoProjects as any).projects
-
-    stubFetch((url) => {
-      if (url === '/config/shared.json') return jsonRes(baseLocal)
-      return jsonRes(prodNoProjects)
-    })
-    const { fetchConfig } = await import('../hooks/useSharedConfig')
-    const cfg = await fetchConfig(true)
+    expect(Object.keys(cfg!.projects).sort()).toEqual(["a2a"]);
+    expect(cfg!.projects.a2a.name).toBe("A2A");
+  });
+
+  it("falls back to {} when secondary.projects is missing (line 80 ?? arm)", async () => {
+    const prodNoProjects: Partial<SharedConfig> = { ...baseProd };
+    delete (prodNoProjects as any).projects;
+
+    stubFetch(url => {
+      if (url === "/config/shared.json") return jsonRes(baseLocal);
+      return jsonRes(prodNoProjects);
+    });
+    const { fetchConfig } = await import("../hooks/useSharedConfig");
+    const cfg = await fetchConfig(true);
     // Only primary (local) projects survive.
-    expect(Object.keys(cfg!.projects).sort()).toEqual(['kubestellar'])
-    expect(cfg!.projects.kubestellar.name).toBe('KubeStellar')
-  })
-
-  it('falls back to {} when primary.editBaseUrls is missing (line 87 ?? arm)', async () => {
-    const localNoEdit: Partial<SharedConfig> = { ...baseLocal }
-    delete (localNoEdit as any).editBaseUrls
-
-    stubFetch((url) => {
-      if (url === '/config/shared.json') return jsonRes(localNoEdit)
-      return jsonRes(baseProd)
-    })
-    const { fetchConfig } = await import('../hooks/useSharedConfig')
-    const cfg = await fetchConfig(true)
-    expect(Object.keys(cfg!.editBaseUrls).sort()).toEqual(['a2a'])
-    expect(cfg!.editBaseUrls.a2a).toBe('https://prod.example/a2a')
-  })
-
-  it('falls back to {} when secondary.editBaseUrls is missing (line 86 ?? arm)', async () => {
-    const prodNoEdit: Partial<SharedConfig> = { ...baseProd }
-    delete (prodNoEdit as any).editBaseUrls
-
-    stubFetch((url) => {
-      if (url === '/config/shared.json') return jsonRes(baseLocal)
-      return jsonRes(prodNoEdit)
-    })
-    const { fetchConfig } = await import('../hooks/useSharedConfig')
-    const cfg = await fetchConfig(true)
-    expect(Object.keys(cfg!.editBaseUrls).sort()).toEqual(['kubestellar'])
-    expect(cfg!.editBaseUrls.kubestellar).toBe('https://local.example/edit')
-  })
-
-  it('falls back to secondary.surveyUrl when primary.surveyUrl is undefined (line 89 ?? arm)', async () => {
-    const localNoSurvey: Partial<SharedConfig> = { ...baseLocal }
-    delete (localNoSurvey as any).surveyUrl
-
-    stubFetch((url) => {
-      if (url === '/config/shared.json') return jsonRes(localNoSurvey)
-      return jsonRes(baseProd)
-    })
-    const { fetchConfig } = await import('../hooks/useSharedConfig')
-    const cfg = await fetchConfig(true)
-    expect(cfg!.surveyUrl).toBe('https://prod.example/survey')
-  })
-
-  it('leaves surveyUrl undefined when neither side has one', async () => {
-    const localNoSurvey: Partial<SharedConfig> = { ...baseLocal }
-    const prodNoSurvey: Partial<SharedConfig> = { ...baseProd }
-    delete (localNoSurvey as any).surveyUrl
-    delete (prodNoSurvey as any).surveyUrl
-
-    stubFetch((url) => {
-      if (url === '/config/shared.json') return jsonRes(localNoSurvey)
-      return jsonRes(prodNoSurvey)
-    })
-    const { fetchConfig } = await import('../hooks/useSharedConfig')
-    const cfg = await fetchConfig(true)
-    expect(cfg!.surveyUrl).toBeUndefined()
-  })
-})
+    expect(Object.keys(cfg!.projects).sort()).toEqual(["kubestellar"]);
+    expect(cfg!.projects.kubestellar.name).toBe("KubeStellar");
+  });
+
+  it("falls back to {} when primary.editBaseUrls is missing (line 87 ?? arm)", async () => {
+    const localNoEdit: Partial<SharedConfig> = { ...baseLocal };
+    delete (localNoEdit as any).editBaseUrls;
+
+    stubFetch(url => {
+      if (url === "/config/shared.json") return jsonRes(localNoEdit);
+      return jsonRes(baseProd);
+    });
+    const { fetchConfig } = await import("../hooks/useSharedConfig");
+    const cfg = await fetchConfig(true);
+    expect(Object.keys(cfg!.editBaseUrls).sort()).toEqual(["a2a"]);
+    expect(cfg!.editBaseUrls.a2a).toBe("https://prod.example/a2a");
+  });
+
+  it("falls back to {} when secondary.editBaseUrls is missing (line 86 ?? arm)", async () => {
+    const prodNoEdit: Partial<SharedConfig> = { ...baseProd };
+    delete (prodNoEdit as any).editBaseUrls;
+
+    stubFetch(url => {
+      if (url === "/config/shared.json") return jsonRes(baseLocal);
+      return jsonRes(prodNoEdit);
+    });
+    const { fetchConfig } = await import("../hooks/useSharedConfig");
+    const cfg = await fetchConfig(true);
+    expect(Object.keys(cfg!.editBaseUrls).sort()).toEqual(["kubestellar"]);
+    expect(cfg!.editBaseUrls.kubestellar).toBe("https://local.example/edit");
+  });
+
+  it("falls back to secondary.surveyUrl when primary.surveyUrl is undefined (line 89 ?? arm)", async () => {
+    const localNoSurvey: Partial<SharedConfig> = { ...baseLocal };
+    delete (localNoSurvey as any).surveyUrl;
+
+    stubFetch(url => {
+      if (url === "/config/shared.json") return jsonRes(localNoSurvey);
+      return jsonRes(baseProd);
+    });
+    const { fetchConfig } = await import("../hooks/useSharedConfig");
+    const cfg = await fetchConfig(true);
+    expect(cfg!.surveyUrl).toBe("https://prod.example/survey");
+  });
+
+  it("leaves surveyUrl undefined when neither side has one", async () => {
+    const localNoSurvey: Partial<SharedConfig> = { ...baseLocal };
+    const prodNoSurvey: Partial<SharedConfig> = { ...baseProd };
+    delete (localNoSurvey as any).surveyUrl;
+    delete (prodNoSurvey as any).surveyUrl;
+
+    stubFetch(url => {
+      if (url === "/config/shared.json") return jsonRes(localNoSurvey);
+      return jsonRes(prodNoSurvey);
+    });
+    const { fetchConfig } = await import("../hooks/useSharedConfig");
+    const cfg = await fetchConfig(true);
+    expect(cfg!.surveyUrl).toBeUndefined();
+  });
+});
diff --git a/src/__tests__/useSharedConfig.test.ts b/src/__tests__/useSharedConfig.test.ts
index f457752..a9379d7 100644
--- a/src/__tests__/useSharedConfig.test.ts
+++ b/src/__tests__/useSharedConfig.test.ts
@@ -1,4 +1,4 @@
-import { describe, it, expect } from 'vitest'
+import { describe, it, expect } from "vitest";
 import {
   getVersionsForProject,
   getProjectInfo,
@@ -6,7 +6,7 @@ import {
   getSurveyUrl,
   type SharedConfig,
   type VersionInfo,
-} from '../hooks/useSharedConfig'
+} from "../hooks/useSharedConfig";
 
 // ---------------------------------------------------------------------------
 // Test fixtures
@@ -15,126 +15,151 @@ import {
 const mockConfig: SharedConfig = {
   versions: {
     kubestellar: {
-      latest: { label: 'v0.30.0 (Latest)', branch: 'docs/0.30.0', isDefault: true },
-      main: { label: 'main (dev)', branch: 'main', isDefault: false, isDev: true },
+      latest: {
+        label: "v0.30.0 (Latest)",
+        branch: "docs/0.30.0",
+        isDefault: true,
+      },
+      main: {
+        label: "main (dev)",
+        branch: "main",
+        isDefault: false,
+        isDev: true,
+      },
     },
     a2a: {
-      latest: { label: 'v0.1.0 (Latest)', branch: 'docs/a2a/0.1.0', isDefault: true },
+      latest: {
+        label: "v0.1.0 (Latest)",
+        branch: "docs/a2a/0.1.0",
+        isDefault: true,
+      },
     },
   },
   projects: {
-    kubestellar: { name: 'KubeStellar', basePath: '', currentVersion: '0.30.0' },
-    a2a: { name: 'A2A', basePath: 'a2a', currentVersion: '0.1.0' },
+    kubestellar: {
+      name: "KubeStellar",
+      basePath: "",
+      currentVersion: "0.30.0",
+    },
+    a2a: { name: "A2A", basePath: "a2a", currentVersion: "0.1.0" },
   },
-  relatedProjects: [
-    { title: 'KubeFlex', href: '/docs/kubeflex' },
-  ],
+  relatedProjects: [{ title: "KubeFlex", href: "/docs/kubeflex" }],
   editBaseUrls: {
-    kubestellar: 'https://github.com/hivecommons/docs/edit/main/docs/content',
-    a2a: 'https://github.com/hivecommons/docs/edit/main/docs/content/a2a',
+    kubestellar: "https://github.com/hivecommons/docs/edit/main/docs/content",
+    a2a: "https://github.com/hivecommons/docs/edit/main/docs/content/a2a",
   },
-  surveyUrl: 'https://example.com/survey',
-  updatedAt: '2026-06-25T12:00:00Z',
-}
+  surveyUrl: "https://example.com/survey",
+  updatedAt: "2026-06-25T12:00:00Z",
+};
 
 // ---------------------------------------------------------------------------
 // getVersionsForProject
 // ---------------------------------------------------------------------------
 
-describe('getVersionsForProject', () => {
-  it('returns versions array for a known project', () => {
-    const versions = getVersionsForProject(mockConfig, 'kubestellar')
-    expect(versions).toHaveLength(2)
-    expect(versions[0].key).toBe('latest')
-    expect(versions[0].label).toBe('v0.30.0 (Latest)')
-  })
-
-  it('returns empty array for unknown project', () => {
-    expect(getVersionsForProject(mockConfig, 'nonexistent')).toEqual([])
-  })
-
-  it('returns empty array when config is null', () => {
-    expect(getVersionsForProject(null, 'kubestellar')).toEqual([])
-  })
-
-  it('each version entry has key and VersionInfo fields', () => {
-    const versions = getVersionsForProject(mockConfig, 'a2a')
-    expect(versions).toHaveLength(1)
+describe("getVersionsForProject", () => {
+  it("returns versions array for a known project", () => {
+    const versions = getVersionsForProject(mockConfig, "kubestellar");
+    expect(versions).toHaveLength(2);
+    expect(versions[0].key).toBe("latest");
+    expect(versions[0].label).toBe("v0.30.0 (Latest)");
+  });
+
+  it("returns empty array for unknown project", () => {
+    expect(getVersionsForProject(mockConfig, "nonexistent")).toEqual([]);
+  });
+
+  it("returns empty array when config is null", () => {
+    expect(getVersionsForProject(null, "kubestellar")).toEqual([]);
+  });
+
+  it("each version entry has key and VersionInfo fields", () => {
+    const versions = getVersionsForProject(mockConfig, "a2a");
+    expect(versions).toHaveLength(1);
     expect(versions[0]).toEqual({
-      key: 'latest',
-      label: 'v0.1.0 (Latest)',
-      branch: 'docs/a2a/0.1.0',
+      key: "latest",
+      label: "v0.1.0 (Latest)",
+      branch: "docs/a2a/0.1.0",
       isDefault: true,
-    })
-  })
-})
+    });
+  });
+});
 
 // ---------------------------------------------------------------------------
 // getProjectInfo
 // ---------------------------------------------------------------------------
 
-describe('getProjectInfo', () => {
-  it('returns project info for a known project', () => {
-    const info = getProjectInfo(mockConfig, 'kubestellar')
+describe("getProjectInfo", () => {
+  it("returns project info for a known project", () => {
+    const info = getProjectInfo(mockConfig, "kubestellar");
     expect(info).toEqual({
-      name: 'KubeStellar',
-      basePath: '',
-      currentVersion: '0.30.0',
-    })
-  })
+      name: "KubeStellar",
+      basePath: "",
+      currentVersion: "0.30.0",
+    });
+  });
 
-  it('returns null for unknown project', () => {
-    expect(getProjectInfo(mockConfig, 'nonexistent')).toBeNull()
-  })
+  it("returns null for unknown project", () => {
+    expect(getProjectInfo(mockConfig, "nonexistent")).toBeNull();
+  });
 
-  it('returns null when config is null', () => {
-    expect(getProjectInfo(null, 'kubestellar')).toBeNull()
-  })
-})
+  it("returns null when config is null", () => {
+    expect(getProjectInfo(null, "kubestellar")).toBeNull();
+  });
+});
 
 // ---------------------------------------------------------------------------
 // getEditUrl
 // ---------------------------------------------------------------------------
 
-describe('getEditUrl', () => {
-  it('constructs edit URL for known project', () => {
-    const url = getEditUrl(mockConfig, 'kubestellar', 'getting-started/install.md')
+describe("getEditUrl", () => {
+  it("constructs edit URL for known project", () => {
+    const url = getEditUrl(
+      mockConfig,
+      "kubestellar",
+      "getting-started/install.md"
+    );
     expect(url).toBe(
-      'https://github.com/hivecommons/docs/edit/main/docs/content/getting-started/install.md'
-    )
-  })
-
-  it('strips leading slash from filePath', () => {
-    const url = getEditUrl(mockConfig, 'kubestellar', '/getting-started/install.md')
+      "https://github.com/hivecommons/docs/edit/main/docs/content/getting-started/install.md"
+    );
+  });
+
+  it("strips leading slash from filePath", () => {
+    const url = getEditUrl(
+      mockConfig,
+      "kubestellar",
+      "/getting-started/install.md"
+    );
     expect(url).toBe(
-      'https://github.com/hivecommons/docs/edit/main/docs/content/getting-started/install.md'
-    )
-  })
+      "https://github.com/hivecommons/docs/edit/main/docs/content/getting-started/install.md"
+    );
+  });
 
-  it('returns null for unknown project', () => {
-    expect(getEditUrl(mockConfig, 'nonexistent', 'file.md')).toBeNull()
-  })
+  it("returns null for unknown project", () => {
+    expect(getEditUrl(mockConfig, "nonexistent", "file.md")).toBeNull();
+  });
 
-  it('returns null when config is null', () => {
-    expect(getEditUrl(null, 'kubestellar', 'file.md')).toBeNull()
-  })
-})
+  it("returns null when config is null", () => {
+    expect(getEditUrl(null, "kubestellar", "file.md")).toBeNull();
+  });
+});
 
 // ---------------------------------------------------------------------------
 // getSurveyUrl
 // ---------------------------------------------------------------------------
 
-describe('getSurveyUrl', () => {
-  it('returns surveyUrl from config', () => {
-    expect(getSurveyUrl(mockConfig)).toBe('https://example.com/survey')
-  })
-
-  it('returns fallback when config is null', () => {
-    expect(getSurveyUrl(null)).toBe('https://docs.hivecommons.dev/survey')
-  })
-
-  it('returns fallback when surveyUrl is undefined', () => {
-    const configWithout = { ...mockConfig, surveyUrl: undefined }
-    expect(getSurveyUrl(configWithout)).toBe('https://docs.hivecommons.dev/survey')
-  })
-})
+describe("getSurveyUrl", () => {
+  it("returns surveyUrl from config", () => {
+    expect(getSurveyUrl(mockConfig)).toBe("https://example.com/survey");
+  });
+
+  it("returns fallback when config is null", () => {
+    expect(getSurveyUrl(null)).toBe("https://docs.hivecommons.dev/survey");
+  });
+
+  it("returns fallback when surveyUrl is undefined", () => {
+    const configWithout = { ...mockConfig, surveyUrl: undefined };
+    expect(getSurveyUrl(configWithout)).toBe(
+      "https://docs.hivecommons.dev/survey"
+    );
+  });
+});
diff --git a/src/__tests__/versions.test.ts b/src/__tests__/versions.test.ts
index 77780c0..414d4d7 100644
--- a/src/__tests__/versions.test.ts
+++ b/src/__tests__/versions.test.ts
@@ -1,4 +1,4 @@
-import { describe, it, expect } from 'vitest'
+import { describe, it, expect } from "vitest";
 import {
   PROJECTS,
   PRODUCTION_URL,
@@ -18,176 +18,180 @@ import {
   CURRENT_VERSION,
   type ProjectId,
   type VersionKey,
-} from '../config/versions'
+} from "../config/versions";
 
-describe('getProjectFromPath', () => {
+describe("getProjectFromPath", () => {
   it.each([
-    ['/docs/hotshot', 'hotshot'],
-    ['/docs/hotshot/getting-started', 'hotshot'],
-    ['/docs/pluk', 'pluk'],
-    ['/docs/rationguard/install', 'rationguard'],
-    ['/docs/promptargs', 'promptargs'],
-    ['/docs/dibs', 'dibs'],
-    ['/docs/spektacular/api', 'spektacular'],
-  ] as const)('maps %s to project %s', (pathname, id) => {
-    expect(getProjectFromPath(pathname).id).toBe(id)
-  })
-
-  it('defaults to hive for the docs root and unknown paths', () => {
-    expect(getProjectFromPath('/docs').id).toBe('hive')
-    expect(getProjectFromPath('/docs/architecture').id).toBe('hive')
-    expect(getProjectFromPath('/').id).toBe('hive')
-    expect(getProjectFromPath('').id).toBe('hive')
-  })
-
-  it('does not match project names outside the /docs prefix', () => {
-    expect(getProjectFromPath('/hotshot').id).toBe('hive')
-  })
-})
-
-describe('getProject / getAllProjects', () => {
-  it('returns the config for each declared project id', () => {
+    ["/docs/hotshot", "hotshot"],
+    ["/docs/hotshot/getting-started", "hotshot"],
+    ["/docs/pluk", "pluk"],
+    ["/docs/rationguard/install", "rationguard"],
+    ["/docs/promptargs", "promptargs"],
+    ["/docs/dibs", "dibs"],
+    ["/docs/spektacular/api", "spektacular"],
+  ] as const)("maps %s to project %s", (pathname, id) => {
+    expect(getProjectFromPath(pathname).id).toBe(id);
+  });
+
+  it("defaults to hive for the docs root and unknown paths", () => {
+    expect(getProjectFromPath("/docs").id).toBe("hive");
+    expect(getProjectFromPath("/docs/architecture").id).toBe("hive");
+    expect(getProjectFromPath("/").id).toBe("hive");
+    expect(getProjectFromPath("").id).toBe("hive");
+  });
+
+  it("does not match project names outside the /docs prefix", () => {
+    expect(getProjectFromPath("/hotshot").id).toBe("hive");
+  });
+});
+
+describe("getProject / getAllProjects", () => {
+  it("returns the config for each declared project id", () => {
     for (const id of Object.keys(PROJECTS) as ProjectId[]) {
-      expect(getProject(id)).toBe(PROJECTS[id])
-      expect(getProject(id).id).toBe(id)
+      expect(getProject(id)).toBe(PROJECTS[id]);
+      expect(getProject(id).id).toBe(id);
     }
-  })
+  });
 
-  it('getAllProjects returns every project exactly once', () => {
-    const all = getAllProjects()
-    expect(all).toHaveLength(Object.keys(PROJECTS).length)
-    expect(new Set(all.map((p) => p.id)).size).toBe(all.length)
-  })
+  it("getAllProjects returns every project exactly once", () => {
+    const all = getAllProjects();
+    expect(all).toHaveLength(Object.keys(PROJECTS).length);
+    expect(new Set(all.map(p => p.id)).size).toBe(all.length);
+  });
 
-  it('every project declares exactly one default version', () => {
+  it("every project declares exactly one default version", () => {
     for (const project of getAllProjects()) {
-      const defaults = Object.values(project.versions).filter((v) => v.isDefault)
-      expect(defaults, `project ${project.id}`).toHaveLength(1)
+      const defaults = Object.values(project.versions).filter(v => v.isDefault);
+      expect(defaults, `project ${project.id}`).toHaveLength(1);
     }
-  })
-})
-
-describe('hive backwards-compatible version helpers', () => {
-  it('getDefaultVersion returns latest', () => {
-    expect(getDefaultVersion()).toBe('latest')
-  })
-
-  it('getCurrentVersion mirrors CURRENT_VERSION and the hive project', () => {
-    expect(getCurrentVersion()).toBe(CURRENT_VERSION)
-    expect(getCurrentVersion()).toBe(PROJECTS.hive.currentVersion)
-  })
-
-  it('getBranchForVersion returns the configured branch for latest', () => {
-    expect(getBranchForVersion('latest')).toBe(PROJECTS.hive.versions.latest.branch)
-  })
-
-  it('getBranchForVersion falls back to main for unknown versions', () => {
-    expect(getBranchForVersion('nope' as VersionKey)).toBe('main')
-  })
-
-  it('getAllVersions returns key plus the version info fields', () => {
-    const all = getAllVersions()
-    expect(all.length).toBeGreaterThan(0)
-    const latest = all.find((v) => v.key === 'latest')
-    expect(latest).toBeDefined()
-    expect(latest!.branch).toBe(PROJECTS.hive.versions.latest.branch)
-    expect(latest!.isDefault).toBe(true)
-  })
-})
-
-describe('getVersionFromBranch', () => {
-  it('maps main and master to latest', () => {
-    expect(getVersionFromBranch('main')).toBe('latest')
-    expect(getVersionFromBranch('master')).toBe('latest')
-  })
-
-  it('returns null for unknown branches', () => {
-    expect(getVersionFromBranch('feature/foo')).toBeNull()
-    expect(getVersionFromBranch('')).toBeNull()
-  })
-
-  it('returns null for docs/* branches with no matching version entry', () => {
-    expect(getVersionFromBranch('docs/9.9.9')).toBeNull()
-  })
-})
-
-describe('isVersionBranch', () => {
-  it('accepts main and docs/* branches', () => {
-    expect(isVersionBranch('main')).toBe(true)
-    expect(isVersionBranch('docs/1.2.3')).toBe(true)
-  })
-
-  it('accepts configured Hive version branches', () => {
-    expect(isVersionBranch(PROJECTS.hive.versions.latest.branch)).toBe(true)
-  })
-
-  it('rejects everything else', () => {
-    expect(isVersionBranch('master')).toBe(false)
-    expect(isVersionBranch('feature/docs')).toBe(false)
-    expect(isVersionBranch('')).toBe(false)
-  })
-})
-
-describe('getVersionUrl', () => {
-  it('returns the production URL with pathname for unknown version keys', () => {
-    expect(getVersionUrl('nope', '/docs/x')).toBe(`${PRODUCTION_URL}/docs/x`)
-  })
-
-  it('returns the production URL for latest', () => {
-    expect(getVersionUrl('latest')).toBe(`${PRODUCTION_URL}/docs`)
-    expect(getVersionUrl('latest', '/docs/architecture', 'hotshot')).toBe(
+  });
+});
+
+describe("hive backwards-compatible version helpers", () => {
+  it("getDefaultVersion returns latest", () => {
+    expect(getDefaultVersion()).toBe("latest");
+  });
+
+  it("getCurrentVersion mirrors CURRENT_VERSION and the hive project", () => {
+    expect(getCurrentVersion()).toBe(CURRENT_VERSION);
+    expect(getCurrentVersion()).toBe(PROJECTS.hive.currentVersion);
+  });
+
+  it("getBranchForVersion returns the configured branch for latest", () => {
+    expect(getBranchForVersion("latest")).toBe(
+      PROJECTS.hive.versions.latest.branch
+    );
+  });
+
+  it("getBranchForVersion falls back to main for unknown versions", () => {
+    expect(getBranchForVersion("nope" as VersionKey)).toBe("main");
+  });
+
+  it("getAllVersions returns key plus the version info fields", () => {
+    const all = getAllVersions();
+    expect(all.length).toBeGreaterThan(0);
+    const latest = all.find(v => v.key === "latest");
+    expect(latest).toBeDefined();
+    expect(latest!.branch).toBe(PROJECTS.hive.versions.latest.branch);
+    expect(latest!.isDefault).toBe(true);
+  });
+});
+
+describe("getVersionFromBranch", () => {
+  it("maps main and master to latest", () => {
+    expect(getVersionFromBranch("main")).toBe("latest");
+    expect(getVersionFromBranch("master")).toBe("latest");
+  });
+
+  it("returns null for unknown branches", () => {
+    expect(getVersionFromBranch("feature/foo")).toBeNull();
+    expect(getVersionFromBranch("")).toBeNull();
+  });
+
+  it("returns null for docs/* branches with no matching version entry", () => {
+    expect(getVersionFromBranch("docs/9.9.9")).toBeNull();
+  });
+});
+
+describe("isVersionBranch", () => {
+  it("accepts main and docs/* branches", () => {
+    expect(isVersionBranch("main")).toBe(true);
+    expect(isVersionBranch("docs/1.2.3")).toBe(true);
+  });
+
+  it("accepts configured Hive version branches", () => {
+    expect(isVersionBranch(PROJECTS.hive.versions.latest.branch)).toBe(true);
+  });
+
+  it("rejects everything else", () => {
+    expect(isVersionBranch("master")).toBe(false);
+    expect(isVersionBranch("feature/docs")).toBe(false);
+    expect(isVersionBranch("")).toBe(false);
+  });
+});
+
+describe("getVersionUrl", () => {
+  it("returns the production URL with pathname for unknown version keys", () => {
+    expect(getVersionUrl("nope", "/docs/x")).toBe(`${PRODUCTION_URL}/docs/x`);
+  });
+
+  it("returns the production URL for latest", () => {
+    expect(getVersionUrl("latest")).toBe(`${PRODUCTION_URL}/docs`);
+    expect(getVersionUrl("latest", "/docs/architecture", "hotshot")).toBe(
       `${PRODUCTION_URL}/docs/architecture`
-    )
-  })
+    );
+  });
 
-  it('builds a Netlify branch-deploy URL for non-default branch versions', () => {
-    const projects = { ...PROJECTS }
+  it("builds a Netlify branch-deploy URL for non-default branch versions", () => {
+    const projects = { ...PROJECTS };
     // Simulate a versioned entry the way a docs/x.y.z branch would be configured.
-    projects.hive.versions['v0-test'] = {
-      label: 'v0 test',
-      branch: 'docs/0.28.0',
+    projects.hive.versions["v0-test"] = {
+      label: "v0 test",
+      branch: "docs/0.28.0",
       isDefault: false,
-    }
+    };
     try {
-      expect(getVersionUrl('v0-test', '/docs')).toBe(
+      expect(getVersionUrl("v0-test", "/docs")).toBe(
         `https://docs-0-28-0--${NETLIFY_SITE_NAME}.netlify.app/docs`
-      )
+      );
     } finally {
-      delete projects.hive.versions['v0-test']
+      delete projects.hive.versions["v0-test"];
     }
-  })
+  });
 
-  it('prefers an externalUrl when the version declares one', () => {
-    PROJECTS.spektacular.versions['ext-test'] = {
-      label: 'ext',
-      branch: 'main',
+  it("prefers an externalUrl when the version declares one", () => {
+    PROJECTS.spektacular.versions["ext-test"] = {
+      label: "ext",
+      branch: "main",
       isDefault: false,
-      externalUrl: 'https://spektacular.dev',
-    }
+      externalUrl: "https://spektacular.dev",
+    };
     try {
-      expect(getVersionUrl('ext-test', '/docs', 'spektacular')).toBe('https://spektacular.dev')
+      expect(getVersionUrl("ext-test", "/docs", "spektacular")).toBe(
+        "https://spektacular.dev"
+      );
     } finally {
-      delete PROJECTS.spektacular.versions['ext-test']
+      delete PROJECTS.spektacular.versions["ext-test"];
     }
-  })
-})
-
-describe('getProjectVersions', () => {
-  it('returns key + info for each version of a project', () => {
-    const versions = getProjectVersions('hive')
-    expect(versions.map((v) => v.key)).toContain('latest')
-    const latest = versions.find((v) => v.key === 'latest')!
-    expect(latest.isDefault).toBe(true)
-  })
-})
-
-describe('isVersionMigrated', () => {
-  it('latest and legacy are always available', () => {
-    expect(isVersionMigrated('latest')).toBe(true)
-    expect(isVersionMigrated('legacy', 'hotshot')).toBe(true)
-  })
-
-  it('other versions are available only when declared', () => {
-    expect(isVersionMigrated('v0.1', 'hive')).toBe(false)
-  })
-})
+  });
+});
+
+describe("getProjectVersions", () => {
+  it("returns key + info for each version of a project", () => {
+    const versions = getProjectVersions("hive");
+    expect(versions.map(v => v.key)).toContain("latest");
+    const latest = versions.find(v => v.key === "latest")!;
+    expect(latest.isDefault).toBe(true);
+  });
+});
+
+describe("isVersionMigrated", () => {
+  it("latest and legacy are always available", () => {
+    expect(isVersionMigrated("latest")).toBe(true);
+    expect(isVersionMigrated("legacy", "hotshot")).toBe(true);
+  });
+
+  it("other versions are available only when declared", () => {
+    expect(isVersionMigrated("v0.1", "hive")).toBe(false);
+  });
+});
diff --git a/src/app/[locale]/layout.tsx b/src/app/[locale]/layout.tsx
index c2fd0aa..2d33dac 100644
--- a/src/app/[locale]/layout.tsx
+++ b/src/app/[locale]/layout.tsx
@@ -13,19 +13,35 @@ import "../globals.css";
 // Self-hosted fonts (see src/fonts) to avoid fetching from fonts.googleapis.com at build time.
 const inter = localFont({
   src: [
-    { path: "../../fonts/ibm-plex-sans-400-600-normal.woff2", weight: "400 600", style: "normal" },
-    { path: "../../fonts/ibm-plex-sans-400-600-italic.woff2", weight: "400 600", style: "italic" },
+    {
+      path: "../../fonts/ibm-plex-sans-400-600-normal.woff2",
+      weight: "400 600",
+      style: "normal",
+    },
+    {
+      path: "../../fonts/ibm-plex-sans-400-600-italic.woff2",
+      weight: "400 600",
+      style: "italic",
+    },
   ],
   variable: "--font-inter",
 });
 
 const fraunces = localFont({
-  src: [{ path: "../../fonts/fraunces-600.woff2", weight: "600", style: "normal" }],
+  src: [
+    { path: "../../fonts/fraunces-600.woff2", weight: "600", style: "normal" },
+  ],
   variable: "--font-fraunces",
 });
 
 const jetbrainsMono = localFont({
-  src: [{ path: "../../fonts/jetbrains-mono-100-800.woff2", weight: "100 800", style: "normal" }],
+  src: [
+    {
+      path: "../../fonts/jetbrains-mono-100-800.woff2",
+      weight: "100 800",
+      style: "normal",
+    },
+  ],
   variable: "--font-jetbrains-mono",
 });
 
diff --git a/src/app/api/docs-image/[...path]/route.ts b/src/app/api/docs-image/[...path]/route.ts
index 457adad..5b9f5f5 100644
--- a/src/app/api/docs-image/[...path]/route.ts
+++ b/src/app/api/docs-image/[...path]/route.ts
@@ -1,88 +1,88 @@
-import { NextRequest, NextResponse } from 'next/server'
-import fs from 'fs'
-import path from 'path'
-import { logger } from '@/lib/logger'
-import { recordApiRequest } from '@/lib/metrics'
+import { NextRequest, NextResponse } from "next/server";
+import fs from "fs";
+import path from "path";
+import { logger } from "@/lib/logger";
+import { recordApiRequest } from "@/lib/metrics";
 
-const DOCS_CONTENT_PATH = path.join(process.cwd(), 'docs', 'content')
+const DOCS_CONTENT_PATH = path.join(process.cwd(), "docs", "content");
 
 const MIME_TYPES: Record<string, string> = {
-  '.png': 'image/png',
-  '.jpg': 'image/jpeg',
-  '.jpeg': 'image/jpeg',
-  '.gif': 'image/gif',
-  '.svg': 'image/svg+xml',
-  '.webp': 'image/webp',
-  '.ico': 'image/x-icon',
-}
+  ".png": "image/png",
+  ".jpg": "image/jpeg",
+  ".jpeg": "image/jpeg",
+  ".gif": "image/gif",
+  ".svg": "image/svg+xml",
+  ".webp": "image/webp",
+  ".ico": "image/x-icon",
+};
 
 /** Per-response CSP for SVG: no scripts, opaque origin when opened directly. */
-const SVG_CSP = "default-src 'none'; style-src 'unsafe-inline'; sandbox"
+const SVG_CSP = "default-src 'none'; style-src 'unsafe-inline'; sandbox";
 
 export async function GET(
   request: NextRequest,
   { params }: { params: Promise<{ path: string[] }> }
 ) {
-  const startedAt = performance.now()
-  let status = 200
+  const startedAt = performance.now();
+  let status = 200;
   try {
-    const { path: pathSegments } = await params
-    const imagePath = pathSegments.join('/')
+    const { path: pathSegments } = await params;
+    const imagePath = pathSegments.join("/");
 
     // Security: prevent directory traversal
-    if (imagePath.includes('..')) {
-      status = 403
-      return new NextResponse('Forbidden', { status })
+    if (imagePath.includes("..")) {
+      status = 403;
+      return new NextResponse("Forbidden", { status });
     }
 
-    const fullPath = path.join(DOCS_CONTENT_PATH, imagePath)
+    const fullPath = path.join(DOCS_CONTENT_PATH, imagePath);
 
     // Check if file exists and is within docs/content (trailing sep prevents sibling-dir prefix confusion)
     if (!fullPath.startsWith(DOCS_CONTENT_PATH + path.sep)) {
-      status = 403
-      return new NextResponse('Forbidden', { status })
+      status = 403;
+      return new NextResponse("Forbidden", { status });
     }
 
     // Only known image types are served; anything else under docs/content
     // (page sources, config) is not reachable through this route.
-    const ext = path.extname(fullPath).toLowerCase()
-    const mimeType = MIME_TYPES[ext]
+    const ext = path.extname(fullPath).toLowerCase();
+    const mimeType = MIME_TYPES[ext];
     if (!mimeType) {
-      status = 404
-      return new NextResponse('Not Found', { status })
+      status = 404;
+      return new NextResponse("Not Found", { status });
     }
 
     if (!fs.existsSync(fullPath)) {
-      status = 404
-      return new NextResponse('Not Found', { status })
+      status = 404;
+      return new NextResponse("Not Found", { status });
     }
 
-    const fileBuffer = fs.readFileSync(fullPath)
+    const fileBuffer = fs.readFileSync(fullPath);
 
     const headers: Record<string, string> = {
-      'Content-Type': mimeType,
-      'Cache-Control': 'public, max-age=31536000, immutable',
-    }
-    if (mimeType === 'image/svg+xml') {
+      "Content-Type": mimeType,
+      "Cache-Control": "public, max-age=31536000, immutable",
+    };
+    if (mimeType === "image/svg+xml") {
       // SVG can carry inline script. The site-wide CSP allows 'unsafe-inline',
       // so sandbox the document when it is navigated to directly; <img>
       // rendering is unaffected.
-      headers['Content-Security-Policy'] = SVG_CSP
-      headers['Content-Disposition'] = 'inline'
+      headers["Content-Security-Policy"] = SVG_CSP;
+      headers["Content-Disposition"] = "inline";
     }
 
-    return new NextResponse(fileBuffer, { headers })
+    return new NextResponse(fileBuffer, { headers });
   } catch (error) {
-    status = 500
-    logger.error('docs-image request failed', {
-      route: 'docs-image',
-      method: 'GET',
+    status = 500;
+    logger.error("docs-image request failed", {
+      route: "docs-image",
+      method: "GET",
       status,
       error: error instanceof Error ? error.message : String(error),
-    })
-    return new NextResponse('Internal Server Error', { status })
+    });
+    return new NextResponse("Internal Server Error", { status });
   } finally {
-    const durationMs = performance.now() - startedAt
-    recordApiRequest('docs-image', 'GET', status, durationMs)
+    const durationMs = performance.now() - startedAt;
+    recordApiRequest("docs-image", "GET", status, durationMs);
   }
 }
diff --git a/src/app/api/healthz/route.ts b/src/app/api/healthz/route.ts
index 9bdb898..affbd02 100644
--- a/src/app/api/healthz/route.ts
+++ b/src/app/api/healthz/route.ts
@@ -1,7 +1,7 @@
-import { NextResponse } from 'next/server'
-import fs from 'fs'
-import { docsContentPath } from '../../docs/page-map'
-import { logger } from '@/lib/logger'
+import { NextResponse } from "next/server";
+import fs from "fs";
+import { docsContentPath } from "../../docs/page-map";
+import { logger } from "@/lib/logger";
 
 // Readiness check for the docs app.
 //
@@ -16,24 +16,46 @@ import { logger } from '@/lib/logger'
 // traffic to this instance.
 export async function GET() {
   try {
-    const stat = fs.statSync(docsContentPath)
+    const stat = fs.statSync(docsContentPath);
     if (!stat.isDirectory()) {
-      const reason = 'docs content path is not a directory'
-      logger.error('healthz check failed', { route: 'healthz', method: 'GET', status: 503, error: reason })
-      return NextResponse.json({ status: 'unhealthy', reason }, { status: 503 })
+      const reason = "docs content path is not a directory";
+      logger.error("healthz check failed", {
+        route: "healthz",
+        method: "GET",
+        status: 503,
+        error: reason,
+      });
+      return NextResponse.json(
+        { status: "unhealthy", reason },
+        { status: 503 }
+      );
     }
 
-    const entries = fs.readdirSync(docsContentPath)
+    const entries = fs.readdirSync(docsContentPath);
     if (entries.length === 0) {
-      const reason = 'docs content path is empty'
-      logger.error('healthz check failed', { route: 'healthz', method: 'GET', status: 503, error: reason })
-      return NextResponse.json({ status: 'unhealthy', reason }, { status: 503 })
+      const reason = "docs content path is empty";
+      logger.error("healthz check failed", {
+        route: "healthz",
+        method: "GET",
+        status: 503,
+        error: reason,
+      });
+      return NextResponse.json(
+        { status: "unhealthy", reason },
+        { status: 503 }
+      );
     }
 
-    return NextResponse.json({ status: 'ok' }, { status: 200 })
+    return NextResponse.json({ status: "ok" }, { status: 200 });
   } catch (err) {
-    const reason = err instanceof Error ? err.message : 'docs content path is unreadable'
-    logger.error('healthz check failed', { route: 'healthz', method: 'GET', status: 503, error: reason })
-    return NextResponse.json({ status: 'unhealthy', reason }, { status: 503 })
+    const reason =
+      err instanceof Error ? err.message : "docs content path is unreadable";
+    logger.error("healthz check failed", {
+      route: "healthz",
+      method: "GET",
+      status: 503,
+      error: reason,
+    });
+    return NextResponse.json({ status: "unhealthy", reason }, { status: 503 });
   }
 }
diff --git a/src/app/api/metrics/route.ts b/src/app/api/metrics/route.ts
index a7250ae..e0b87bf 100644
--- a/src/app/api/metrics/route.ts
+++ b/src/app/api/metrics/route.ts
@@ -1,5 +1,5 @@
-import { NextResponse } from "next/server"
-import { metricsRegistry } from "@/lib/metrics"
+import { NextResponse } from "next/server";
+import { metricsRegistry } from "@/lib/metrics";
 
 /**
  * Prometheus scrape endpoint for docs site API metrics.
@@ -8,11 +8,11 @@ import { metricsRegistry } from "@/lib/metrics"
  * and does not forward metrics to any external system.
  */
 export async function GET() {
-  const body = await metricsRegistry.metrics()
+  const body = await metricsRegistry.metrics();
   return new NextResponse(body, {
     status: 200,
     headers: {
       "Content-Type": metricsRegistry.contentType,
     },
-  })
+  });
 }
diff --git a/src/app/api/search/route.ts b/src/app/api/search/route.ts
index adcab43..fffff22 100644
--- a/src/app/api/search/route.ts
+++ b/src/app/api/search/route.ts
@@ -1,70 +1,70 @@
-import { NextRequest, NextResponse } from "next/server"
-import { convertHtmlScriptsToJsxComments } from "@/lib/transformMdx"
-import { buildPageMap, docsContentPath, basePath } from "../../docs/page-map"
-import fs from 'fs'
-import path from 'path'
-import { logger } from "@/lib/logger"
-import { recordApiRequest } from "@/lib/metrics"
+import { NextRequest, NextResponse } from "next/server";
+import { convertHtmlScriptsToJsxComments } from "@/lib/transformMdx";
+import { buildPageMap, docsContentPath, basePath } from "../../docs/page-map";
+import fs from "fs";
+import path from "path";
+import { logger } from "@/lib/logger";
+import { recordApiRequest } from "@/lib/metrics";
 
 interface SearchResult {
-  title: string
-  url: string
-  category: string
-  content: string
-  snippet: string
-  highlightedSnippet: string
-  matchType: "title" | "content" | "category"
+  title: string;
+  url: string;
+  category: string;
+  content: string;
+  snippet: string;
+  highlightedSnippet: string;
+  matchType: "title" | "content" | "category";
 }
 
 // Apply a regex removal repeatedly until the output is stable.
 // Prevents bypass via nested/interleaved input (CWE-20, CodeQL js/incomplete-multi-character-sanitization).
 function stripUntilStableSR(text: string, pattern: RegExp): string {
-  let prev = ''
+  let prev = "";
   while (text !== prev) {
-    prev = text
-    text = text.replace(pattern, '')
+    prev = text;
+    text = text.replace(pattern, "");
   }
-  return text
+  return text;
 }
 
 function toPlainText(content: string): string {
-  let text = content
+  let text = content;
 
   // Remove code blocks, inline code, comments
-  text = text.replace(/```[\s\S]*?```/g, "")
-  text = text.replace(/`[^`]+`/g, "")
+  text = text.replace(/```[\s\S]*?```/g, "");
+  text = text.replace(/`[^`]+`/g, "");
   // Loop until stable — single-pass removal of `<!--...-->` is bypassable via
   // nested input e.g. `<!-<!--` → removes inner `<!--` → reassembles to `<!--`
   // (CodeQL #11: js/incomplete-multi-character-sanitization)
-  text = stripUntilStableSR(text, /<!--[\s\S]*?-->/g)
+  text = stripUntilStableSR(text, /<!--[\s\S]*?-->/g);
 
   // Links/images
-  text = text.replace(/\[([^\]]+)\]\(([^)]+)\)/g, "$1")
-  text = text.replace(/!\[([^\]]*)\]\(([^)]+)\)/g, "")
+  text = text.replace(/\[([^\]]+)\]\(([^)]+)\)/g, "$1");
+  text = text.replace(/!\[([^\]]*)\]\(([^)]+)\)/g, "");
 
   // Headings -> keep text
-  text = text.replace(/^#{1,6}\s+(.+)$/gm, "$1")
+  text = text.replace(/^#{1,6}\s+(.+)$/gm, "$1");
 
   // Bold/italic
-  text = text.replace(/\*\*([^*]+)\*\*/g, "$1")
-  text = text.replace(/\*([^*]+)\*/g, "$1")
-  text = text.replace(/_([^_]+)_/g, "$1")
+  text = text.replace(/\*\*([^*]+)\*\*/g, "$1");
+  text = text.replace(/\*([^*]+)\*/g, "$1");
+  text = text.replace(/_([^_]+)_/g, "$1");
 
   // HR
-  text = text.replace(/^---+$/gm, "")
+  text = text.replace(/^---+$/gm, "");
 
   // Strip residual HTML tags — loop until stable to prevent nested-tag bypass
   // (CodeQL #12: js/incomplete-multi-character-sanitization)
-  text = stripUntilStableSR(text, /<\/?[^>]+>/g)
+  text = stripUntilStableSR(text, /<\/?[^>]+>/g);
 
   // Collapse whitespace
-  text = text.replace(/\n\s*\n/g, "\n").trim()
-  return text
+  text = text.replace(/\n\s*\n/g, "\n").trim();
+  return text;
 }
 
 function extractTitle(md: string, fallback: string): string {
-  const m = md.match(/^#\s+(.+)$/m)
-  return m ? m[1].trim() : fallback
+  const m = md.match(/^#\s+(.+)$/m);
+  return m ? m[1].trim() : fallback;
 }
 
 // `isProjectFile` is true when the content was resolved from the hive
@@ -73,13 +73,13 @@ function extractTitle(md: string, fallback: string): string {
 // segment that the real docs route (src/app/docs/[...slug]/page.tsx) adds
 // for project pages.
 function routeKeyToUrl(routeKey: string, isProjectFile: boolean): string {
-  const prefix = isProjectFile ? `${basePath}/hive` : basePath
-  return routeKey ? `/${prefix}/${routeKey}` : `/${prefix}`
+  const prefix = isProjectFile ? `${basePath}/hive` : basePath;
+  return routeKey ? `/${prefix}/${routeKey}` : `/${prefix}`;
 }
 
 interface LocalFile {
-  content: string
-  isProjectFile: boolean
+  content: string;
+  isProjectFile: boolean;
 }
 
 // buildPageMap() (called with no projectId below) defaults to the hive
@@ -92,101 +92,104 @@ interface LocalFile {
 // first, then the hive project root, mirroring the fallback in
 // getPageContent() in src/app/docs/[...slug]/page.tsx.
 function readLocalFile(filePath: string): LocalFile | null {
-  const sharedPath = path.join(docsContentPath, filePath)
+  const sharedPath = path.join(docsContentPath, filePath);
   try {
     if (fs.existsSync(sharedPath)) {
-      return { content: fs.readFileSync(sharedPath, 'utf-8'), isProjectFile: false }
+      return {
+        content: fs.readFileSync(sharedPath, "utf-8"),
+        isProjectFile: false,
+      };
     }
   } catch {
     // File doesn't exist under the shared root
   }
 
-  const projectPath = path.join(docsContentPath, 'hive', filePath)
+  const projectPath = path.join(docsContentPath, "hive", filePath);
   try {
     if (fs.existsSync(projectPath)) {
-      return { content: fs.readFileSync(projectPath, 'utf-8'), isProjectFile: true }
+      return {
+        content: fs.readFileSync(projectPath, "utf-8"),
+        isProjectFile: true,
+      };
     }
   } catch {
     // File doesn't exist under the hive project root either
   }
 
-  return null
+  return null;
 }
 
 /** HTML-encode special characters so they render as text in innerHTML */
 function htmlEncode(str: string): string {
-  return str
-    .replace(/&/g, "&amp;")
-    .replace(/</g, "&lt;")
-    .replace(/>/g, "&gt;")
+  return str.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
 }
 
 export async function GET(request: NextRequest) {
-  const startedAt = performance.now()
-  let status = 200
+  const startedAt = performance.now();
+  let status = 200;
   try {
-    const sp = request.nextUrl.searchParams
-    const queryRaw = sp.get("q") || ""
-    const query = queryRaw.toLowerCase().trim()
-    if (!query) return NextResponse.json({ results: [], count: 0 })
+    const sp = request.nextUrl.searchParams;
+    const queryRaw = sp.get("q") || "";
+    const query = queryRaw.toLowerCase().trim();
+    if (!query) return NextResponse.json({ results: [], count: 0 });
 
-    const { routeMap } = buildPageMap()
+    const { routeMap } = buildPageMap();
 
-    const entries = Object.entries(routeMap) as Array<[string, string]>
+    const entries = Object.entries(routeMap) as Array<[string, string]>;
 
-    const results: SearchResult[] = []
+    const results: SearchResult[] = [];
 
     for (const [routeKey, filePath] of entries) {
-      const file = readLocalFile(filePath)
-      if (!file) continue
-      const { content: raw, isProjectFile } = file
+      const file = readLocalFile(filePath);
+      if (!file) continue;
+      const { content: raw, isProjectFile } = file;
 
-      const preprocessed = convertHtmlScriptsToJsxComments(raw)
-      const text = toPlainText(preprocessed)
+      const preprocessed = convertHtmlScriptsToJsxComments(raw);
+      const text = toPlainText(preprocessed);
 
       const fallbackTitle =
         routeKey
           .split("/")
           .pop()
           ?.replace(/-/g, " ")
-          .replace(/\b\w/g, c => c.toUpperCase()) || "Untitled"
-      const title = extractTitle(raw, fallbackTitle)
+          .replace(/\b\w/g, c => c.toUpperCase()) || "Untitled";
+      const title = extractTitle(raw, fallbackTitle);
 
-      const hay = text.toLowerCase()
-      const titleMatch = title.toLowerCase().includes(query)
-      const contentMatch = hay.includes(query)
-      if (!titleMatch && !contentMatch) continue
+      const hay = text.toLowerCase();
+      const titleMatch = title.toLowerCase().includes(query);
+      const contentMatch = hay.includes(query);
+      if (!titleMatch && !contentMatch) continue;
 
-      let snippet = ""
-      let highlightedSnippet = ""
+      let snippet = "";
+      let highlightedSnippet = "";
       if (contentMatch) {
-        const idx = hay.indexOf(query)
-        const start = Math.max(0, idx - 60)
-        const end = Math.min(text.length, idx + query.length + 80)
+        const idx = hay.indexOf(query);
+        const start = Math.max(0, idx - 60);
+        const end = Math.min(text.length, idx + query.length + 80);
         snippet =
           (start > 0 ? "..." : "") +
           text.slice(start, end) +
-          (end < text.length ? "..." : "")
+          (end < text.length ? "..." : "");
 
         // HTML-encode the snippet so HTML entities in docs content (&lt;img&gt;
         // etc.) cannot become live HTML when rendered via dangerouslySetInnerHTML.
         // Only the <mark>/<\/mark> tags we insert below are trusted raw HTML.
-        const encodedSnippet = htmlEncode(snippet)
+        const encodedSnippet = htmlEncode(snippet);
         const rx = new RegExp(
           `(${query.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")})`,
           "gi"
-        )
-        highlightedSnippet = encodedSnippet.replace(rx, "<mark>$1</mark>")
+        );
+        highlightedSnippet = encodedSnippet.replace(rx, "<mark>$1</mark>");
       } else {
-        snippet = text.slice(0, 140) + (text.length > 140 ? "..." : "")
-        highlightedSnippet = htmlEncode(snippet)
+        snippet = text.slice(0, 140) + (text.length > 140 ? "..." : "");
+        highlightedSnippet = htmlEncode(snippet);
       }
 
       const category =
         routeKey
           .split("/")[0]
           ?.replace(/-/g, " ")
-          .replace(/\b\w/g, c => c.toUpperCase()) || "Docs"
+          .replace(/\b\w/g, c => c.toUpperCase()) || "Docs";
 
       results.push({
         title,
@@ -196,34 +199,34 @@ export async function GET(request: NextRequest) {
         snippet,
         highlightedSnippet,
         matchType: titleMatch ? "title" : "content",
-      })
+      });
     }
 
     // Sort: title matches first, then by title alphabetically
     results.sort((a, b) => {
-      if (a.matchType === "title" && b.matchType !== "title") return -1
-      if (a.matchType !== "title" && b.matchType === "title") return 1
-      return a.title.localeCompare(b.title)
-    })
+      if (a.matchType === "title" && b.matchType !== "title") return -1;
+      if (a.matchType !== "title" && b.matchType === "title") return 1;
+      return a.title.localeCompare(b.title);
+    });
 
     return NextResponse.json({
       results: results.slice(0, 20),
       count: results.length,
-    })
+    });
   } catch (error) {
-    status = 500
+    status = 500;
     logger.error("search request failed", {
       route: "search",
       method: "GET",
       status,
       error: error instanceof Error ? error.message : String(error),
-    })
+    });
     return NextResponse.json(
       { error: "Search failed", results: [], count: 0 },
       { status: 500 }
-    )
+    );
   } finally {
-    const durationMs = performance.now() - startedAt
-    recordApiRequest("search", "GET", status, durationMs)
+    const durationMs = performance.now() - startedAt;
+    recordApiRequest("search", "GET", status, durationMs);
   }
 }
diff --git a/src/app/error.tsx b/src/app/error.tsx
index bfac9ab..53fe7a4 100644
--- a/src/app/error.tsx
+++ b/src/app/error.tsx
@@ -2,6 +2,11 @@
 
 import ErrorFallbackUI from "@/components/ErrorFallbackUI";
 
-export default function Error({ reset }: { error: Error & { digest?: string }; reset: () => void }) {
+export default function Error({
+  reset,
+}: {
+  error: Error & { digest?: string };
+  reset: () => void;
+}) {
   return <ErrorFallbackUI reset={reset} />;
 }
diff --git a/src/app/globals.css b/src/app/globals.css
index e60070d..472185d 100644
--- a/src/app/globals.css
+++ b/src/app/globals.css
@@ -67,25 +67,46 @@ html:not(.dark) {
   color-scheme: light;
 }
 
-*, *::before, *::after { box-sizing: border-box; }
-html { scroll-behavior: smooth; -webkit-text-size-adjust: 100%; }
+*,
+*::before,
+*::after {
+  box-sizing: border-box;
+}
+html {
+  scroll-behavior: smooth;
+  -webkit-text-size-adjust: 100%;
+}
 body {
   margin: 0;
   background: var(--bg);
   color: var(--ink);
   font-family: var(--font-sans);
   font-feature-settings: "kern", "liga";
-  transition: background-color 0.3s ease, color 0.3s ease;
+  transition:
+    background-color 0.3s ease,
+    color 0.3s ease;
 }
 
-a { color: inherit; }
-a:focus-visible, button:focus-visible, input:focus-visible, select:focus-visible, textarea:focus-visible, [tabindex]:focus-visible {
+a {
+  color: inherit;
+}
+a:focus-visible,
+button:focus-visible,
+input:focus-visible,
+select:focus-visible,
+textarea:focus-visible,
+[tabindex]:focus-visible {
   outline: 2px solid var(--focus);
   outline-offset: 3px;
   border-radius: 2px;
 }
 
-h1, h2, h3, h4, h5, h6 {
+h1,
+h2,
+h3,
+h4,
+h5,
+h6 {
   font-family: var(--font-sans);
   font-weight: 600;
   letter-spacing: -0.01em;
@@ -150,9 +171,12 @@ html.dark body {
   --honeycomb-tile: url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' width='56' height='97' viewBox='0 0 56 97'%3E%3Cpath d='M28 1l27 15.5v31L28 63 1 47.5v-31zM28 34l27 15.5v31L28 96 1 80.5v-31z' fill='none' stroke='%23e0a33a' stroke-opacity='.07'/%3E%3C/svg%3E");
   --page-backdrop:
     radial-gradient(80% 70% at 75% 12%, transparent 10%, var(--bg) 100%),
-    radial-gradient(900px 520px at 78% 0%, var(--honeycomb-glow) 0%, transparent 62%),
-    var(--honeycomb-tile),
-    var(--bg);
+    radial-gradient(
+      900px 520px at 78% 0%,
+      var(--honeycomb-glow) 0%,
+      transparent 62%
+    ),
+    var(--honeycomb-tile), var(--bg);
 }
 html:not(.dark) {
   --honeycomb-glow: #ecdcb4;
@@ -162,7 +186,11 @@ body,
 html.dark body,
 html:not(.dark) body {
   background: var(--page-backdrop);
-  background-size: auto, auto, 56px 97px, auto;
+  background-size:
+    auto,
+    auto,
+    56px 97px,
+    auto;
   background-repeat: no-repeat, no-repeat, repeat, no-repeat;
   background-attachment: fixed;
 }
@@ -195,7 +223,11 @@ html:not(.dark) .nextra-docs-theme .nextra-sidebar-container {
   border: 1px solid var(--line);
   border-radius: 1rem;
   background:
-    linear-gradient(135deg, color-mix(in srgb, var(--honey) 12%, transparent), transparent 45%),
+    linear-gradient(
+      135deg,
+      color-mix(in srgb, var(--honey) 12%, transparent),
+      transparent 45%
+    ),
     color-mix(in srgb, var(--bg-2) 88%, transparent);
   padding: clamp(1rem, 3vw, 1.75rem);
   box-shadow: 0 18px 60px color-mix(in srgb, #000 24%, transparent);
@@ -215,8 +247,16 @@ html:not(.dark) .nextra-docs-theme .nextra-sidebar-container {
   gap: clamp(1rem, 4vw, 2rem);
   padding: clamp(1.25rem, 4vw, 2.5rem);
   background:
-    radial-gradient(650px 320px at 18% 5%, color-mix(in srgb, var(--honey) 28%, transparent), transparent 70%),
-    linear-gradient(135deg, color-mix(in srgb, var(--honey) 17%, transparent), transparent 48%),
+    radial-gradient(
+      650px 320px at 18% 5%,
+      color-mix(in srgb, var(--honey) 28%, transparent),
+      transparent 70%
+    ),
+    linear-gradient(
+      135deg,
+      color-mix(in srgb, var(--honey) 17%, transparent),
+      transparent 48%
+    ),
     color-mix(in srgb, var(--bg-2) 92%, transparent);
 }
 
@@ -415,7 +455,9 @@ html:not(.dark) .nextra-docs-theme .nextra-sidebar-container {
 .hc-meeting-videoButton img {
   object-fit: cover;
   opacity: 0.84;
-  transition: transform 0.2s ease, opacity 0.2s ease;
+  transition:
+    transform 0.2s ease,
+    opacity 0.2s ease;
 }
 
 .hc-meeting-videoButton:hover img,
@@ -668,7 +710,9 @@ html.dark .ks-doc-figure figcaption {
   text-decoration: none;
   padding: 0.75rem;
   border-radius: 0.5rem;
-  transition: transform 0.2s, box-shadow 0.2s;
+  transition:
+    transform 0.2s,
+    box-shadow 0.2s;
   background: rgba(128, 128, 128, 0.1);
 }
 
@@ -712,7 +756,7 @@ html:not(.dark) .contributor-card:hover {
   .contributors-grid {
     grid-template-columns: repeat(auto-fill, minmax(100px, 1fr));
   }
-  
+
   .contributor-card img {
     width: 60px;
     height: 60px;
@@ -1235,7 +1279,7 @@ html:not(.dark) .contributor-card:hover {
   animation: slide-in-left 0.8s ease-out 2s forwards;
 }
 
-.animate-slide-in-left-3{
+.animate-slide-in-left-3 {
   animation: slide-in-left 0.8s ease-out 3s forwards;
 }
 
@@ -1243,7 +1287,7 @@ html:not(.dark) .contributor-card:hover {
   animation: slide-in-left 0.8s ease-out 4s forwards;
 }
 
-.animate-slide-in-left-5{
+.animate-slide-in-left-5 {
   animation: slide-in-left 0.8s ease-out 5s forwards;
 }
 
@@ -1251,11 +1295,10 @@ html:not(.dark) .contributor-card:hover {
   animation: slide-in-left 0.8s ease-out 6s forwards;
 }
 
-.animate-slide-in-left-7{
+.animate-slide-in-left-7 {
   animation: slide-in-left 0.8s ease-out 7s forwards;
 }
 
-
 .animate-typing {
   animation: typing 2s steps(40, end) forwards;
 }
@@ -2501,7 +2544,12 @@ html:not(.dark) .contributor-card:hover {
   max-width: none !important;
 }
 
-.prose h1, .prose h2, .prose h3, .prose h4, .prose h5, .prose h6 {
+.prose h1,
+.prose h2,
+.prose h3,
+.prose h4,
+.prose h5,
+.prose h6 {
   color: var(--ink);
   font-weight: 600;
   letter-spacing: -0.01em;
@@ -2522,13 +2570,31 @@ html:not(.dark) .contributor-card:hover {
   padding-bottom: 0.5rem;
 }
 
-.prose h3 { font-size: 1.5rem; margin: 2rem 0 0.75rem; }
-.prose h4 { font-size: 1.25rem; margin: 1.5rem 0 0.5rem; }
-.prose h5 { font-size: 1.125rem; margin: 1rem 0 0.5rem; }
-.prose h6 { font-size: 1rem; margin: 0.75rem 0 0.5rem; }
+.prose h3 {
+  font-size: 1.5rem;
+  margin: 2rem 0 0.75rem;
+}
+.prose h4 {
+  font-size: 1.25rem;
+  margin: 1.5rem 0 0.5rem;
+}
+.prose h5 {
+  font-size: 1.125rem;
+  margin: 1rem 0 0.5rem;
+}
+.prose h6 {
+  font-size: 1rem;
+  margin: 0.75rem 0 0.5rem;
+}
 
-.prose p, .prose li { color: var(--ink); }
-.prose p { margin-bottom: 1rem; line-height: 1.75; }
+.prose p,
+.prose li {
+  color: var(--ink);
+}
+.prose p {
+  margin-bottom: 1rem;
+  line-height: 1.75;
+}
 
 .prose a {
   color: var(--honey);
@@ -2538,7 +2604,10 @@ html:not(.dark) .contributor-card:hover {
   text-underline-offset: 0.18em;
 }
 
-.prose a:hover { color: var(--honey-deep); text-decoration-color: currentColor; }
+.prose a:hover {
+  color: var(--honey-deep);
+  text-decoration-color: currentColor;
+}
 
 .prose code {
   background: var(--bg-3);
@@ -2566,12 +2635,30 @@ html:not(.dark) .contributor-card:hover {
   color: var(--ink);
 }
 
-.prose ul, .prose ol { margin: 1rem 0; padding-left: 1.5rem; }
-.prose ul { list-style-type: disc; }
-.prose ol { list-style-type: decimal; }
-.prose ul ul, .prose ol ul { list-style-type: circle; }
-.prose ul ul ul, .prose ol ul ul, .prose ol ol ul { list-style-type: square; }
-.prose li { margin-bottom: 0.5rem; padding-left: 0.25rem; }
+.prose ul,
+.prose ol {
+  margin: 1rem 0;
+  padding-left: 1.5rem;
+}
+.prose ul {
+  list-style-type: disc;
+}
+.prose ol {
+  list-style-type: decimal;
+}
+.prose ul ul,
+.prose ol ul {
+  list-style-type: circle;
+}
+.prose ul ul ul,
+.prose ol ul ul,
+.prose ol ol ul {
+  list-style-type: square;
+}
+.prose li {
+  margin-bottom: 0.5rem;
+  padding-left: 0.25rem;
+}
 
 .prose blockquote {
   border-left: 3px solid var(--honey);
@@ -2582,7 +2669,10 @@ html:not(.dark) .contributor-card:hover {
   border-radius: 0 var(--radius) var(--radius) 0;
   font-style: normal;
 }
-.prose blockquote p { color: var(--ink-2); margin-bottom: 0; }
+.prose blockquote p {
+  color: var(--ink-2);
+  margin-bottom: 0;
+}
 
 .prose table {
   width: 100%;
@@ -2590,27 +2680,51 @@ html:not(.dark) .contributor-card:hover {
   border-collapse: collapse;
   color: var(--ink);
 }
-.prose thead { background: var(--bg-2); }
-.prose th, .prose td {
+.prose thead {
+  background: var(--bg-2);
+}
+.prose th,
+.prose td {
   border: 1px solid var(--line);
   padding: 0.5rem 1rem;
   text-align: left;
 }
-.prose th { font-weight: 600; color: var(--ink); }
-.prose td { color: var(--ink); }
+.prose th {
+  font-weight: 600;
+  color: var(--ink);
+}
+.prose td {
+  color: var(--ink);
+}
 
 .prose img {
   border-radius: var(--radius);
   margin: 1.5rem auto;
   border: 1px solid var(--line);
 }
-.prose hr { margin: 2rem 0; border-color: var(--line); }
+.prose hr {
+  margin: 2rem 0;
+  border-color: var(--line);
+}
 
 /* Sidebar Scrollbar Styling */
-aside::-webkit-scrollbar, .nextra-sidebar-container nav::-webkit-scrollbar { width: 6px; }
-aside::-webkit-scrollbar-track, .nextra-sidebar-container nav::-webkit-scrollbar-track { background: var(--bg-2); }
-aside::-webkit-scrollbar-thumb, .nextra-sidebar-container nav::-webkit-scrollbar-thumb { background: var(--line); border-radius: 9999px; }
-aside::-webkit-scrollbar-thumb:hover, .nextra-sidebar-container nav::-webkit-scrollbar-thumb:hover { background: var(--honey-deep); }
+aside::-webkit-scrollbar,
+.nextra-sidebar-container nav::-webkit-scrollbar {
+  width: 6px;
+}
+aside::-webkit-scrollbar-track,
+.nextra-sidebar-container nav::-webkit-scrollbar-track {
+  background: var(--bg-2);
+}
+aside::-webkit-scrollbar-thumb,
+.nextra-sidebar-container nav::-webkit-scrollbar-thumb {
+  background: var(--line);
+  border-radius: 9999px;
+}
+aside::-webkit-scrollbar-thumb:hover,
+.nextra-sidebar-container nav::-webkit-scrollbar-thumb:hover {
+  background: var(--honey-deep);
+}
 
 .nextra-sidebar-container > div:last-child,
 .nextra-sidebar-container > button:last-of-type {
diff --git a/src/app/robots.ts b/src/app/robots.ts
index 62ad389..a49f027 100644
--- a/src/app/robots.ts
+++ b/src/app/robots.ts
@@ -1,13 +1,13 @@
-import type { MetadataRoute } from 'next'
+import type { MetadataRoute } from "next";
 
-const SITE_URL = 'https://docs.hivecommons.dev'
+const SITE_URL = "https://docs.hivecommons.dev";
 
 export default function robots(): MetadataRoute.Robots {
   return {
     rules: {
-      userAgent: '*',
-      allow: '/',
+      userAgent: "*",
+      allow: "/",
     },
     sitemap: `${SITE_URL}/sitemap.xml`,
-  }
+  };
 }
diff --git a/src/app/sitemap.ts b/src/app/sitemap.ts
index 5b0cb97..51a0d7d 100644
--- a/src/app/sitemap.ts
+++ b/src/app/sitemap.ts
@@ -1,62 +1,62 @@
-import type { MetadataRoute } from 'next'
-import fs from 'fs'
-import path from 'path'
-import { PROJECTS, type ProjectId } from '@/config/versions'
+import type { MetadataRoute } from "next";
+import fs from "fs";
+import path from "path";
+import { PROJECTS, type ProjectId } from "@/config/versions";
 
-const SITE_URL = 'https://docs.hivecommons.dev'
+const SITE_URL = "https://docs.hivecommons.dev";
 
 /** Weekly update frequency for docs content */
-const DOCS_CHANGE_FREQ = 'weekly' as const
+const DOCS_CHANGE_FREQ = "weekly" as const;
 /** Monthly update frequency for marketing pages */
-const MARKETING_CHANGE_FREQ = 'monthly' as const
+const MARKETING_CHANGE_FREQ = "monthly" as const;
 
 /** Priority for the homepage */
-const HOMEPAGE_PRIORITY = 1.0
+const HOMEPAGE_PRIORITY = 1.0;
 /** Priority for top-level marketing pages */
-const MARKETING_PRIORITY = 0.8
+const MARKETING_PRIORITY = 0.8;
 /** Priority for docs landing / project root pages */
-const DOCS_ROOT_PRIORITY = 0.9
+const DOCS_ROOT_PRIORITY = 0.9;
 /** Priority for individual docs pages */
-const DOCS_PAGE_PRIORITY = 0.7
+const DOCS_PAGE_PRIORITY = 0.7;
 
 /**
  * Recursively find all .md and .mdx files in a directory.
  * Returns paths relative to the given base directory.
  */
 function findMarkdownFiles(dir: string, baseDir: string = dir): string[] {
-  const files: string[] = []
+  const files: string[] = [];
 
   if (!fs.existsSync(dir)) {
-    return files
+    return files;
   }
 
-  const entries = fs.readdirSync(dir, { withFileTypes: true })
+  const entries = fs.readdirSync(dir, { withFileTypes: true });
 
   for (const entry of entries) {
-    const fullPath = path.join(dir, entry.name)
+    const fullPath = path.join(dir, entry.name);
 
     if (entry.isDirectory()) {
       // Skip hidden directories, node_modules, common-subs (partials), and images
       if (
-        !entry.name.startsWith('.') &&
-        !entry.name.startsWith('_') &&
-        entry.name !== 'node_modules' &&
-        entry.name !== 'common-subs' &&
-        entry.name !== 'images'
+        !entry.name.startsWith(".") &&
+        !entry.name.startsWith("_") &&
+        entry.name !== "node_modules" &&
+        entry.name !== "common-subs" &&
+        entry.name !== "images"
       ) {
-        files.push(...findMarkdownFiles(fullPath, baseDir))
+        files.push(...findMarkdownFiles(fullPath, baseDir));
       }
     } else if (
       entry.isFile() &&
-      (entry.name.endsWith('.md') || entry.name.endsWith('.mdx')) &&
-      !entry.name.startsWith('_')
+      (entry.name.endsWith(".md") || entry.name.endsWith(".mdx")) &&
+      !entry.name.startsWith("_")
     ) {
-      const relativePath = path.relative(baseDir, fullPath).replace(/\\/g, '/')
-      files.push(relativePath)
+      const relativePath = path.relative(baseDir, fullPath).replace(/\\/g, "/");
+      files.push(relativePath);
     }
   }
 
-  return files
+  return files;
 }
 
 /**
@@ -65,17 +65,17 @@ function findMarkdownFiles(dir: string, baseDir: string = dir): string[] {
  */
 function filePathToRoute(filePath: string, projectId: ProjectId): string {
   // Remove file extension
-  let route = filePath.replace(/\.(md|mdx)$/i, '')
+  let route = filePath.replace(/\.(md|mdx)$/i, "");
 
   // Remove trailing /index (index files map to the parent folder route)
-  route = route.replace(/\/index$/, '')
+  route = route.replace(/\/index$/, "");
 
   // For project sub-paths (a2a, kubeflex, etc.), strip the project prefix
   // since content is already scoped to the project directory
-  const project = PROJECTS[projectId]
-  const projectBase = project.basePath ? `/docs/${project.basePath}` : '/docs'
+  const project = PROJECTS[projectId];
+  const projectBase = project.basePath ? `/docs/${project.basePath}` : "/docs";
 
-  return `${projectBase}/${route}`
+  return `${projectBase}/${route}`;
 }
 
 /**
@@ -83,16 +83,16 @@ function filePathToRoute(filePath: string, projectId: ProjectId): string {
  */
 function getLastModified(filePath: string): Date {
   try {
-    const stats = fs.statSync(filePath)
-    return stats.mtime
+    const stats = fs.statSync(filePath);
+    return stats.mtime;
   } catch {
-    return new Date()
+    return new Date();
   }
 }
 
 export default function sitemap(): MetadataRoute.Sitemap {
-  const entries: MetadataRoute.Sitemap = []
-  const contentRoot = path.join(process.cwd(), 'docs', 'content')
+  const entries: MetadataRoute.Sitemap = [];
+  const contentRoot = path.join(process.cwd(), "docs", "content");
 
   // --- Homepage ---
   entries.push({
@@ -100,12 +100,10 @@ export default function sitemap(): MetadataRoute.Sitemap {
     lastModified: new Date(),
     changeFrequency: MARKETING_CHANGE_FREQ,
     priority: HOMEPAGE_PRIORITY,
-  })
+  });
 
   // --- Marketing / locale pages ---
-  const marketingPages = [
-    '/en',
-  ]
+  const marketingPages = ["/en"];
 
   for (const page of marketingPages) {
     entries.push({
@@ -113,7 +111,7 @@ export default function sitemap(): MetadataRoute.Sitemap {
       lastModified: new Date(),
       changeFrequency: MARKETING_CHANGE_FREQ,
       priority: MARKETING_PRIORITY,
-    })
+    });
   }
 
   // --- Docs landing page ---
@@ -122,13 +120,24 @@ export default function sitemap(): MetadataRoute.Sitemap {
     lastModified: new Date(),
     changeFrequency: DOCS_CHANGE_FREQ,
     priority: DOCS_ROOT_PRIORITY,
-  })
+  });
 
   // --- Project-specific docs ---
-  const projectIds: ProjectId[] = ['hive', 'hotshot', 'pluk', 'rationguard', 'promptargs', 'dibs', 'spektacular']
+  const projectIds: ProjectId[] = [
+    "hive",
+    "hotshot",
+    "pluk",
+    "rationguard",
+    "promptargs",
+    "dibs",
+    "spektacular",
+  ];
 
   for (const projectId of projectIds) {
-    const projectContentPath = path.join(contentRoot, PROJECTS[projectId].basePath)
+    const projectContentPath = path.join(
+      contentRoot,
+      PROJECTS[projectId].basePath
+    );
 
     // Add project root entry
     entries.push({
@@ -136,22 +145,22 @@ export default function sitemap(): MetadataRoute.Sitemap {
       lastModified: new Date(),
       changeFrequency: DOCS_CHANGE_FREQ,
       priority: DOCS_ROOT_PRIORITY,
-    })
+    });
 
-    const projectFiles = findMarkdownFiles(projectContentPath)
+    const projectFiles = findMarkdownFiles(projectContentPath);
 
     for (const file of projectFiles) {
-      const fullPath = path.join(projectContentPath, file)
-      const route = filePathToRoute(file, projectId)
+      const fullPath = path.join(projectContentPath, file);
+      const route = filePathToRoute(file, projectId);
 
       entries.push({
         url: `${SITE_URL}${route}`,
         lastModified: getLastModified(fullPath),
         changeFrequency: DOCS_CHANGE_FREQ,
         priority: DOCS_PAGE_PRIORITY,
-      })
+      });
     }
   }
 
-  return entries
+  return entries;
 }
diff --git a/src/components/ErrorFallbackUI.tsx b/src/components/ErrorFallbackUI.tsx
index 25b6ddb..95ff7ff 100644
--- a/src/components/ErrorFallbackUI.tsx
+++ b/src/components/ErrorFallbackUI.tsx
@@ -40,8 +40,19 @@ const styles: Record<string, CSSProperties> = {
     letterSpacing: "-0.04em",
     margin: "0 0 1rem",
   },
-  message: { color: "var(--ef-ink-2)", fontSize: "1.05rem", lineHeight: 1.7, margin: "0 auto 1.75rem", maxWidth: "38rem" },
-  actions: { display: "flex", flexWrap: "wrap", justifyContent: "center", gap: "0.75rem" },
+  message: {
+    color: "var(--ef-ink-2)",
+    fontSize: "1.05rem",
+    lineHeight: 1.7,
+    margin: "0 auto 1.75rem",
+    maxWidth: "38rem",
+  },
+  actions: {
+    display: "flex",
+    flexWrap: "wrap",
+    justifyContent: "center",
+    gap: "0.75rem",
+  },
   primary: {
     border: "1px solid var(--ef-honey)",
     background: "var(--ef-honey)",
@@ -95,17 +106,34 @@ export default function ErrorFallbackUI({ reset }: { reset: () => void }) {
     <main style={styles.page}>
       <ThemeVars />
       <section style={styles.card} aria-labelledby="runtime-error-title">
-        <img src="/hive-commons-logo.png" width="48" height="48" alt="Hive Commons logo" style={styles.logo} />
+        <img
+          src="/hive-commons-logo.png"
+          width="48"
+          height="48"
+          alt="Hive Commons logo"
+          style={styles.logo}
+        />
         <div style={styles.eyebrow}>Hive Commons Docs</div>
-        <h1 id="runtime-error-title" style={styles.title}>Something went wrong</h1>
+        <h1 id="runtime-error-title" style={styles.title}>
+          Something went wrong
+        </h1>
         <p style={styles.message}>
-          The docs hit a temporary runtime error. Try again, or jump back into the Hive docs while we recover this page.
+          The docs hit a temporary runtime error. Try again, or jump back into
+          the Hive docs while we recover this page.
         </p>
         <div style={styles.actions}>
-          <button type="button" onClick={reset} style={styles.primary}>Try again</button>
-          <Link href="/docs/hive/readme" style={styles.secondary}>Hive intro</Link>
-          <Link href="/docs" style={styles.secondary}>Docs home</Link>
-          <Link href="/docs/community/meetings" style={styles.secondary}>Community meetings</Link>
+          <button type="button" onClick={reset} style={styles.primary}>
+            Try again
+          </button>
+          <Link href="/docs/hive/readme" style={styles.secondary}>
+            Hive intro
+          </Link>
+          <Link href="/docs" style={styles.secondary}>
+            Docs home
+          </Link>
+          <Link href="/docs/community/meetings" style={styles.secondary}>
+            Community meetings
+          </Link>
         </div>
       </section>
     </main>
diff --git a/src/components/Footer.tsx b/src/components/Footer.tsx
index 3600317..901aca7 100644
--- a/src/components/Footer.tsx
+++ b/src/components/Footer.tsx
@@ -14,7 +14,9 @@ export default function Footer() {
     e.preventDefault();
     if (!email.trim()) return;
 
-    window.alert("Subscriptions are not available yet. Please try again later.");
+    window.alert(
+      "Subscriptions are not available yet. Please try again later."
+    );
     setEmail("");
   };
   useEffect(() => {
@@ -168,9 +170,7 @@ export default function Footer() {
                 </li>
                 <li>
                   <Link
-                    href={getLocalizedUrl(
-                      "/docs"
-                    )}
+                    href={getLocalizedUrl("/docs")}
                     className="text-gray-400 hover:text-white transition-colors duration-200 text-xs sm:text-sm inline-block"
                   >
                     {t("userGuide")}
@@ -178,9 +178,7 @@ export default function Footer() {
                 </li>
                 <li>
                   <Link
-                    href={getLocalizedUrl(
-                      "/docs"
-                    )}
+                    href={getLocalizedUrl("/docs")}
                     className="text-gray-400 hover:text-white transition-colors duration-200 text-xs sm:text-sm inline-block"
                   >
                     {t("onboarding")}
@@ -205,9 +203,7 @@ export default function Footer() {
                 {t("gettingStarted")}
               </h3>
               <ul className="space-y-1 sm:space-y-3">
-                <li>
-                  
-                </li>
+                <li></li>
                 <li>
                   <Link
                     href={getLocalizedUrl("/docs")}
@@ -314,7 +310,7 @@ export default function Footer() {
                       id="email-address"
                       type="email"
                       value={email}
-                      onChange={(e) => setEmail(e.target.value)}
+                      onChange={e => setEmail(e.target.value)}
                       className="block w-full pl-10 pr-3 py-3 text-sm text-white placeholder-gray-400 bg-gray-700/50 border border-gray-600 rounded-lg focus:outline-none focus:ring-2 focus:ring-blue-500 focus:border-blue-500 transition-colors duration-200"
                       placeholder={t("emailPlaceholder")}
                       required
diff --git a/src/components/GoogleAnalytics.tsx b/src/components/GoogleAnalytics.tsx
index 8775e03..5dcdd20 100644
--- a/src/components/GoogleAnalytics.tsx
+++ b/src/components/GoogleAnalytics.tsx
@@ -43,7 +43,7 @@ export default function GoogleAnalytics() {
  */
 export function gtagEvent(
   eventName: string,
-  params?: Record<string, string | number | boolean>,
+  params?: Record<string, string | number | boolean>
 ) {
   if (typeof window !== "undefined" && window.gtag) {
     window.gtag("event", eventName, params);
diff --git a/src/components/Navbar.tsx b/src/components/Navbar.tsx
index 0b58058..83085e0 100644
--- a/src/components/Navbar.tsx
+++ b/src/components/Navbar.tsx
@@ -17,7 +17,6 @@ export default function Navbar() {
 
   const t = useTranslations("navigation");
 
-
   return (
     <>
       {/* Blur overlay when dropdown is open */}
@@ -122,9 +121,7 @@ export default function Navbar() {
                 </div>
 
                 {/* Marketplace Link */}
-                <div className="relative group">
-                  
-                </div>
+                <div className="relative group"></div>
 
                 {/* Contribute Dropdown */}
                 <div
@@ -199,10 +196,7 @@ export default function Navbar() {
                       </svg>
                       {t("joinIn")}
                     </a>
-                    
-                    
-                    
-                    
+
                     <Link
                       href="/docs/contributing/security/security-inc"
                       className="flex items-center px-4 py-2 text-sm text-gray-300 hover:bg-emerald-900/30 rounded transition-all duration-200 hover:text-emerald-300 hover:shadow-md"
@@ -289,7 +283,8 @@ export default function Navbar() {
                         ></path>
                       </svg>
                       {t("news")}
-                    </Link><Link
+                    </Link>
+                    <Link
                       href="/docs/news/reviews"
                       className="flex items-center px-4 py-2 text-sm text-gray-300 hover:bg-cyan-900/30 rounded transition-all duration-200 hover:text-cyan-300 hover:shadow-md"
                     >
@@ -307,40 +302,41 @@ export default function Navbar() {
                         ></path>
                       </svg>
                       {t("reviews")}
-                    </Link><Link
+                    </Link>
+                    <Link
                       href="/docs/community/meetings#agendas-and-notes"
                       target="_blank"
                       className="flex items-center px-4 py-2 text-sm text-gray-300 hover:bg-cyan-900/30 rounded transition-all duration-200 hover:text-cyan-300 hover:shadow-md"
                     >
-                    <svg
-                      className="h-4 w-4 mr-2"
-                      fill="none"
-                      stroke="currentColor"
-                      viewBox="0 0 24 24"
-                    >
-                      <path
-                        strokeLinecap="round"
-                        strokeLinejoin="round"
-                        strokeWidth="2"
-                        d="M8 7V3m8 4V3m-9 8h10M5 21h14a2 2 0 002-2V7a2 2 0 00-2-2H5a2 2 0 00-2 2v12a2 2 0 002 2z"
-                      />
-                    </svg>
+                      <svg
+                        className="h-4 w-4 mr-2"
+                        fill="none"
+                        stroke="currentColor"
+                        viewBox="0 0 24 24"
+                      >
+                        <path
+                          strokeLinecap="round"
+                          strokeLinejoin="round"
+                          strokeWidth="2"
+                          d="M8 7V3m8 4V3m-9 8h10M5 21h14a2 2 0 002-2V7a2 2 0 00-2-2H5a2 2 0 00-2 2v12a2 2 0 002 2z"
+                        />
+                      </svg>
                       {t("agenda")}
                       <svg
-                      className="ml-1 w-3 h-3 sm:w-4 sm:h-4"
-                      fill="none"
-                      stroke="currentColor"
-                      viewBox="0 0 24 24"
-                    >
-                      <path
-                        strokeLinecap="round"
-                        strokeLinejoin="round"
-                        strokeWidth={2}
-                        d="M10 6H6a2 2 0 00-2 2v10a2 2 0 002 2h10a2 2 0 002-2v-4M14 4h6m0 0v6m0-6L10 14"
-                      />
-                    </svg>
+                        className="ml-1 w-3 h-3 sm:w-4 sm:h-4"
+                        fill="none"
+                        stroke="currentColor"
+                        viewBox="0 0 24 24"
+                      >
+                        <path
+                          strokeLinecap="round"
+                          strokeLinejoin="round"
+                          strokeWidth={2}
+                          d="M10 6H6a2 2 0 00-2 2v10a2 2 0 002 2h10a2 2 0 002-2v-4M14 4h6m0 0v6m0-6L10 14"
+                        />
+                      </svg>
                     </Link>
-                    
+
                     <LocalizedLink
                       href="/#contact"
                       className="flex items-center px-4 py-2 text-sm text-gray-300 hover:bg-cyan-900/30 rounded transition-all duration-200 hover:text-cyan-300 hover:shadow-md"
@@ -360,7 +356,6 @@ export default function Navbar() {
                       </svg>
                       {t("contactUs")}
                     </LocalizedLink>
-                    
                   </div>
                 </div>
               </div>
@@ -387,7 +382,7 @@ export default function Navbar() {
                     target="_blank"
                     rel="noopener noreferrer"
                     className="flex items-center"
-                    onClick={(e) => e.stopPropagation()}
+                    onClick={e => e.stopPropagation()}
                   >
                     <svg
                       className="w-4 h-4"
@@ -610,9 +605,7 @@ export default function Navbar() {
                   </a>
                 </div>
                 {/* MARKETPLACE */}
-                <div className="relative mb-4">
-                  
-                </div>
+                <div className="relative mb-4"></div>
                 <div className="border-t border-gray-400/50 mb-4"></div>
                 <div className="mb-2">
                   <span className="text-sm sm:text-base px-3 font-medium tracking-wider text-gray-400 uppercase">
@@ -642,18 +635,10 @@ export default function Navbar() {
                     <span>{t("joinIn")}</span>
                   </a>
                 </div>
-                <div className="relative mb-2">
-                  
-                </div>
-                <div className="relative mb-2">
-                  
-                </div>
-                <div className="relative mb-2">
-                  
-                </div>
-                <div className="relative mb-2">
-                  
-                </div>
+                <div className="relative mb-2"></div>
+                <div className="relative mb-2"></div>
+                <div className="relative mb-2"></div>
+                <div className="relative mb-2"></div>
                 <div className="relative mb-4">
                   <Link
                     href="/docs/contributing/security/security-inc"
@@ -683,12 +668,8 @@ export default function Navbar() {
                     {t("community")}
                   </span>
                 </div>
-                <div className="relative mb-2">
-                  
-                </div>
-                <div className="relative mb-2">
-                  
-                </div>
+                <div className="relative mb-2"></div>
+                <div className="relative mb-2"></div>
                 <div className="relative mb-2">
                   <LocalizedLink
                     href="/#contact"
@@ -712,9 +693,7 @@ export default function Navbar() {
                     <span>{t("contactUs")}</span>
                   </LocalizedLink>
                 </div>
-                <div className="relative mb-4">
-                  
-                </div>
+                <div className="relative mb-4"></div>
                 <div className="border-t border-gray-400/50 mb-4"></div>
                 <div className="mb-4">
                   <span className="text-sm sm:text-base px-3 font-medium tracking-wider text-gray-400 uppercase">
diff --git a/src/components/NotFoundUI.tsx b/src/components/NotFoundUI.tsx
index 9bb127a..bcb8249 100644
--- a/src/components/NotFoundUI.tsx
+++ b/src/components/NotFoundUI.tsx
@@ -32,7 +32,10 @@ const HIVE_LINKS: QuickLink[] = [
 
 const GENERAL_LINKS: QuickLink[] = [
   { href: "/docs", label: "Docs home", primary: true },
-  { href: "/docs/community/what-is-hive-commons", label: "What is Hive Commons?" },
+  {
+    href: "/docs/community/what-is-hive-commons",
+    label: "What is Hive Commons?",
+  },
   { href: "/docs/community/join-hive-commons", label: "Join Hive Commons" },
   { href: "/docs/community/meetings", label: "Community meetings" },
   { href: "https://github.com/hivecommons", label: "GitHub" },
@@ -97,7 +100,8 @@ const styles: Record<string, CSSProperties> = {
     borderRadius: "1.5rem",
     background:
       "linear-gradient(135deg, color-mix(in srgb, var(--nf-bg-2) 94%, transparent), color-mix(in srgb, var(--nf-bg) 86%, transparent))",
-    boxShadow: "0 24px 80px color-mix(in srgb, var(--nf-shadow) 38%, transparent)",
+    boxShadow:
+      "0 24px 80px color-mix(in srgb, var(--nf-shadow) 38%, transparent)",
     padding: "clamp(1.5rem, 4vw, 3rem)",
   },
   eyebrow: {
@@ -245,8 +249,17 @@ const styles: Record<string, CSSProperties> = {
     textDecoration: "none",
     borderTop: "1px solid var(--nf-line)",
   },
-  resultMeta: { color: "var(--nf-honey)", fontSize: "0.8rem", marginBottom: "0.2rem" },
-  resultSnippet: { color: "var(--nf-ink-2)", fontSize: "0.9rem", lineHeight: 1.5, margin: "0.25rem 0 0" },
+  resultMeta: {
+    color: "var(--nf-honey)",
+    fontSize: "0.8rem",
+    marginBottom: "0.2rem",
+  },
+  resultSnippet: {
+    color: "var(--nf-ink-2)",
+    fontSize: "0.9rem",
+    lineHeight: 1.5,
+    margin: "0.25rem 0 0",
+  },
   footer: {
     borderTop: "1px solid var(--nf-line)",
     padding: "1rem 1.5rem",
@@ -344,10 +357,15 @@ function isExternal(href: string) {
 function QuickLinks({ links }: { links: QuickLink[] }) {
   return (
     <ul style={styles.linkList}>
-      {links.map((link) => (
+      {links.map(link => (
         <li key={link.href}>
           {isExternal(link.href) ? (
-            <a href={link.href} target="_blank" rel="noopener noreferrer" style={styles.listLink}>
+            <a
+              href={link.href}
+              target="_blank"
+              rel="noopener noreferrer"
+              style={styles.listLink}
+            >
               <span>{link.label}</span>
               <span aria-hidden="true">↗</span>
             </a>
@@ -365,11 +383,14 @@ function QuickLinks({ links }: { links: QuickLink[] }) {
 
 export default function NotFoundUI() {
   const pathname = usePathname();
-  const isHiveDocs = pathname?.startsWith("/docs/hive/") || pathname === "/docs/hive";
+  const isHiveDocs =
+    pathname?.startsWith("/docs/hive/") || pathname === "/docs/hive";
   const quickLinks = isHiveDocs ? HIVE_LINKS : GENERAL_LINKS;
   const [query, setQuery] = useState("");
   const [results, setResults] = useState<SearchResult[]>([]);
-  const [searchState, setSearchState] = useState<"idle" | "loading" | "done" | "error">("idle");
+  const [searchState, setSearchState] = useState<
+    "idle" | "loading" | "done" | "error"
+  >("idle");
 
   const message = useMemo(() => {
     if (isHiveDocs) {
@@ -384,7 +405,9 @@ export default function NotFoundUI() {
     if (!trimmed) return;
     setSearchState("loading");
     try {
-      const response = await fetch(`/api/search?q=${encodeURIComponent(trimmed)}`);
+      const response = await fetch(
+        `/api/search?q=${encodeURIComponent(trimmed)}`
+      );
       if (!response.ok) throw new Error("Search failed");
       const data = (await response.json()) as { results?: SearchResult[] };
       setResults((data.results ?? []).slice(0, MAX_RESULTS));
@@ -424,11 +447,13 @@ export default function NotFoundUI() {
           )}
 
           <div style={styles.actions}>
-            {quickLinks.slice(0, 3).map((link) => (
+            {quickLinks.slice(0, 3).map(link => (
               <Link
                 key={link.href}
                 href={link.href}
-                style={link.primary ? styles.buttonPrimary : styles.buttonSecondary}
+                style={
+                  link.primary ? styles.buttonPrimary : styles.buttonSecondary
+                }
               >
                 {link.label}
               </Link>
@@ -437,19 +462,24 @@ export default function NotFoundUI() {
         </section>
 
         <aside style={styles.sidePanel} aria-label="Helpful links and search">
-          <h2 style={styles.sideTitle}>{isHiveDocs ? "Hive docs links" : "Helpful links"}</h2>
+          <h2 style={styles.sideTitle}>
+            {isHiveDocs ? "Hive docs links" : "Helpful links"}
+          </h2>
           <QuickLinks links={quickLinks} />
 
           <h2 style={styles.sideTitle}>Search the docs</h2>
           <form onSubmit={handleSearch} style={styles.searchForm}>
-            <label htmlFor="not-found-search" style={{ position: "absolute", left: "-10000px" }}>
+            <label
+              htmlFor="not-found-search"
+              style={{ position: "absolute", left: "-10000px" }}
+            >
               Search documentation
             </label>
             <input
               id="not-found-search"
               type="search"
               value={query}
-              onChange={(event) => setQuery(event.target.value)}
+              onChange={event => setQuery(event.target.value)}
               placeholder="Search documentation..."
               style={styles.searchInput}
             />
@@ -458,11 +488,22 @@ export default function NotFoundUI() {
             </button>
           </form>
 
-          {searchState === "idle" && <p style={styles.searchHint}>Search Hive, Spektacular, hotshot, pluk, and other Hive Commons docs.</p>}
-          {searchState === "loading" && <p style={styles.searchHint}>Searching…</p>}
-          {searchState === "error" && <p style={styles.searchHint}>Search is temporarily unavailable.</p>}
-          {searchState === "done" && results.length === 0 && <p style={styles.searchHint}>No matching docs found.</p>}
-          {results.map((result) => (
+          {searchState === "idle" && (
+            <p style={styles.searchHint}>
+              Search Hive, Spektacular, hotshot, pluk, and other Hive Commons
+              docs.
+            </p>
+          )}
+          {searchState === "loading" && (
+            <p style={styles.searchHint}>Searching…</p>
+          )}
+          {searchState === "error" && (
+            <p style={styles.searchHint}>Search is temporarily unavailable.</p>
+          )}
+          {searchState === "done" && results.length === 0 && (
+            <p style={styles.searchHint}>No matching docs found.</p>
+          )}
+          {results.map(result => (
             <Link key={result.url} href={result.url} style={styles.resultLink}>
               <div style={styles.resultMeta}>{result.category}</div>
               <strong>{result.title}</strong>
@@ -472,7 +513,9 @@ export default function NotFoundUI() {
         </aside>
       </main>
 
-      <footer style={styles.footer}>© {new Date().getFullYear()} Hive Commons. Apache 2.0 License.</footer>
+      <footer style={styles.footer}>
+        © {new Date().getFullYear()} Hive Commons. Apache 2.0 License.
+      </footer>
     </div>
   );
 }
diff --git a/src/components/animations/globe/NetworkGlobe.tsx b/src/components/animations/globe/NetworkGlobe.tsx
index a903558..a48e300 100644
--- a/src/components/animations/globe/NetworkGlobe.tsx
+++ b/src/components/animations/globe/NetworkGlobe.tsx
@@ -89,7 +89,6 @@ const NetworkGlobe = ({ isLoaded = true }: NetworkGlobeProps) => {
     [t]
   );
 
-
   // Generate data flow paths
   const dataFlows = useMemo(() => {
     const flows: {
diff --git a/src/components/community/MeetingsPage.tsx b/src/components/community/MeetingsPage.tsx
index 8dfdc4a..af8146c 100644
--- a/src/components/community/MeetingsPage.tsx
+++ b/src/components/community/MeetingsPage.tsx
@@ -1,84 +1,92 @@
-'use client'
+"use client";
 
-import { useEffect, useMemo, useState } from 'react'
-import recordingsData from '../../../data/meeting-recordings.json'
-import { COMMUNITY_MEETINGS } from '@/config/community-meetings'
-import { getUpcomingOddIsoWeekMeetings, type UpcomingMeeting } from '@/lib/communityMeetingsSchedule'
+import { useEffect, useMemo, useState } from "react";
+import recordingsData from "../../../data/meeting-recordings.json";
+import { COMMUNITY_MEETINGS } from "@/config/community-meetings";
+import {
+  getUpcomingOddIsoWeekMeetings,
+  type UpcomingMeeting,
+} from "@/lib/communityMeetingsSchedule";
 
 type Recording = {
-  id: string
-  title: string
-  publishedAt: string
-  url: string
-  thumbnail: string
-  description?: string
-  duration?: string
-}
+  id: string;
+  title: string;
+  publishedAt: string;
+  url: string;
+  thumbnail: string;
+  description?: string;
+  duration?: string;
+};
 
-const UPCOMING_COUNT = 4
-const COUNTDOWN_REFRESH_MS = 60_000
+const UPCOMING_COUNT = 4;
+const COUNTDOWN_REFRESH_MS = 60_000;
 const RESOURCE_LINKS = [
-  { label: 'Group', href: COMMUNITY_MEETINGS.googleGroupUrl },
-  { label: 'Docs', href: COMMUNITY_MEETINGS.docsUrl },
-  { label: 'Code', href: COMMUNITY_MEETINGS.codeUrl },
-  { label: 'YouTube', href: COMMUNITY_MEETINGS.recordingsUrl },
-]
+  { label: "Group", href: COMMUNITY_MEETINGS.googleGroupUrl },
+  { label: "Docs", href: COMMUNITY_MEETINGS.docsUrl },
+  { label: "Code", href: COMMUNITY_MEETINGS.codeUrl },
+  { label: "YouTube", href: COMMUNITY_MEETINGS.recordingsUrl },
+];
 
-function formatMeetingDate(date: Date, dateStyle: Intl.DateTimeFormatOptions['dateStyle'] = 'full') {
+function formatMeetingDate(
+  date: Date,
+  dateStyle: Intl.DateTimeFormatOptions["dateStyle"] = "full"
+) {
   return new Intl.DateTimeFormat(undefined, {
-    weekday: dateStyle === 'full' ? 'long' : 'short',
-    year: 'numeric',
-    month: dateStyle === 'full' ? 'long' : 'short',
-    day: 'numeric',
-    hour: 'numeric',
-    minute: '2-digit',
+    weekday: dateStyle === "full" ? "long" : "short",
+    year: "numeric",
+    month: dateStyle === "full" ? "long" : "short",
+    day: "numeric",
+    hour: "numeric",
+    minute: "2-digit",
     timeZone: COMMUNITY_MEETINGS.timeZone,
-    timeZoneName: 'short',
-  }).format(date)
+    timeZoneName: "short",
+  }).format(date);
 }
 
 function formatLocalDate(date: Date) {
   return new Intl.DateTimeFormat(undefined, {
-    weekday: 'long',
-    year: 'numeric',
-    month: 'long',
-    day: 'numeric',
-    hour: 'numeric',
-    minute: '2-digit',
-    timeZoneName: 'short',
-  }).format(date)
+    weekday: "long",
+    year: "numeric",
+    month: "long",
+    day: "numeric",
+    hour: "numeric",
+    minute: "2-digit",
+    timeZoneName: "short",
+  }).format(date);
 }
 
 function meetingEnd(date: Date) {
-  return new Date(date.getTime() + COMMUNITY_MEETINGS.durationMinutes * 60_000)
+  return new Date(date.getTime() + COMMUNITY_MEETINGS.durationMinutes * 60_000);
 }
 
 function formatCountdown(meeting: UpcomingMeeting | undefined, now: Date) {
-  if (!meeting) return 'Calculating next meeting'
+  if (!meeting) return "Calculating next meeting";
 
-  const end = meetingEnd(meeting.date)
-  if (now >= meeting.date && now <= end) return 'Happening now'
+  const end = meetingEnd(meeting.date);
+  if (now >= meeting.date && now <= end) return "Happening now";
 
-  const diffMs = meeting.date.getTime() - now.getTime()
-  if (diffMs <= 0) return 'Starting soon'
+  const diffMs = meeting.date.getTime() - now.getTime();
+  if (diffMs <= 0) return "Starting soon";
 
-  const totalMinutes = Math.ceil(diffMs / 60_000)
-  const days = Math.floor(totalMinutes / (60 * 24))
-  const hours = Math.floor((totalMinutes - days * 60 * 24) / 60)
-  const minutes = totalMinutes % 60
+  const totalMinutes = Math.ceil(diffMs / 60_000);
+  const days = Math.floor(totalMinutes / (60 * 24));
+  const hours = Math.floor((totalMinutes - days * 60 * 24) / 60);
+  const minutes = totalMinutes % 60;
 
-  if (days > 0) return `in ${days} day${days === 1 ? '' : 's'} ${hours} h`
-  if (hours > 0) return `in ${hours} h ${minutes} min`
-  return `in ${minutes} min`
+  if (days > 0) return `in ${days} day${days === 1 ? "" : "s"} ${hours} h`;
+  if (hours > 0) return `in ${hours} h ${minutes} min`;
+  return `in ${minutes} min`;
 }
 
 function calendarHref(date: Date) {
-  const start = date.toISOString().replace(/[-:]|\.\d{3}/g, '')
-  const end = new Date(date.getTime() + COMMUNITY_MEETINGS.durationMinutes * 60_000)
+  const start = date.toISOString().replace(/[-:]|\.\d{3}/g, "");
+  const end = new Date(
+    date.getTime() + COMMUNITY_MEETINGS.durationMinutes * 60_000
+  )
     .toISOString()
-    .replace(/[-:]|\.\d{3}/g, '')
+    .replace(/[-:]|\.\d{3}/g, "");
   const params = new URLSearchParams({
-    action: 'TEMPLATE',
+    action: "TEMPLATE",
     text: COMMUNITY_MEETINGS.title,
     dates: `${start}/${end}`,
     ctz: COMMUNITY_MEETINGS.timeZone,
@@ -88,21 +96,21 @@ function calendarHref(date: Date) {
       `Meeting ID: ${COMMUNITY_MEETINGS.meetingId}`,
       `Agenda: ${COMMUNITY_MEETINGS.agendaUrl}`,
       `Group: ${COMMUNITY_MEETINGS.googleGroupUrl}`,
-    ].join('\n'),
-  })
-  return `https://calendar.google.com/calendar/render?${params.toString()}`
+    ].join("\n"),
+  });
+  return `https://calendar.google.com/calendar/render?${params.toString()}`;
 }
 
 function escapeIcsText(value: string) {
   return value
-    .replace(/\\/g, '\\\\')
-    .replace(/\n/g, '\\n')
-    .replace(/,/g, '\\,')
-    .replace(/;/g, '\\;')
+    .replace(/\\/g, "\\\\")
+    .replace(/\n/g, "\\n")
+    .replace(/,/g, "\\,")
+    .replace(/;/g, "\\;");
 }
 
 function toIcsDate(date: Date) {
-  return date.toISOString().replace(/[-:]|\.\d{3}/g, '')
+  return date.toISOString().replace(/[-:]|\.\d{3}/g, "");
 }
 
 function icsDownloadHref(date: Date) {
@@ -111,16 +119,16 @@ function icsDownloadHref(date: Date) {
     `Meeting ID: ${COMMUNITY_MEETINGS.meetingId}`,
     `Agenda and notes: ${COMMUNITY_MEETINGS.agendaUrl}`,
     `Get invites every meeting: ${COMMUNITY_MEETINGS.googleGroupUrl}`,
-  ].join('\n')
+  ].join("\n");
 
   const ics = [
-    'BEGIN:VCALENDAR',
-    'VERSION:2.0',
-    'PRODID:-//Hive Commons//Docs Community Meetings//EN',
-    'CALSCALE:GREGORIAN',
-    'METHOD:PUBLISH',
-    'BEGIN:VEVENT',
-    `UID:${COMMUNITY_MEETINGS.title.replace(/\s+/g, '-').toLowerCase()}-${toIcsDate(date)}@docs.hivecommons.dev`,
+    "BEGIN:VCALENDAR",
+    "VERSION:2.0",
+    "PRODID:-//Hive Commons//Docs Community Meetings//EN",
+    "CALSCALE:GREGORIAN",
+    "METHOD:PUBLISH",
+    "BEGIN:VEVENT",
+    `UID:${COMMUNITY_MEETINGS.title.replace(/\s+/g, "-").toLowerCase()}-${toIcsDate(date)}@docs.hivecommons.dev`,
     `DTSTAMP:${toIcsDate(new Date())}`,
     `DTSTART:${toIcsDate(date)}`,
     `DTEND:${toIcsDate(meetingEnd(date))}`,
@@ -128,16 +136,24 @@ function icsDownloadHref(date: Date) {
     `DESCRIPTION:${escapeIcsText(details)}`,
     `LOCATION:${escapeIcsText(COMMUNITY_MEETINGS.meetingUrl)}`,
     `URL:${COMMUNITY_MEETINGS.meetingUrl}`,
-    'END:VEVENT',
-    'END:VCALENDAR',
-  ].join('\r\n')
+    "END:VEVENT",
+    "END:VCALENDAR",
+  ].join("\r\n");
 
-  return `data:text/calendar;charset=utf-8,${encodeURIComponent(ics)}`
+  return `data:text/calendar;charset=utf-8,${encodeURIComponent(ics)}`;
 }
 
-function RecordingCard({ recording, active, onPlay }: { recording: Recording; active: boolean; onPlay: () => void }) {
-  const title = recording.title
-  const published = new Date(recording.publishedAt)
+function RecordingCard({
+  recording,
+  active,
+  onPlay,
+}: {
+  recording: Recording;
+  active: boolean;
+  onPlay: () => void;
+}) {
+  const title = recording.title;
+  const published = new Date(recording.publishedAt);
 
   return (
     <article className="hc-meeting-recording">
@@ -150,93 +166,165 @@ function RecordingCard({ recording, active, onPlay }: { recording: Recording; ac
             allowFullScreen
           />
         ) : (
-          <button className="hc-meeting-videoButton" type="button" onClick={onPlay} aria-label={`Play ${title}`}>
+          <button
+            className="hc-meeting-videoButton"
+            type="button"
+            onClick={onPlay}
+            aria-label={`Play ${title}`}
+          >
             <img src={recording.thumbnail} alt="" loading="lazy" />
-            <span className="hc-meeting-play" aria-hidden="true">▶</span>
+            <span className="hc-meeting-play" aria-hidden="true">
+              ▶
+            </span>
           </button>
         )}
       </div>
       <div className="hc-meeting-recordingBody">
         <h3>{title}</h3>
-        <p>{new Intl.DateTimeFormat(undefined, { dateStyle: 'medium' }).format(published)}</p>
+        <p>
+          {new Intl.DateTimeFormat(undefined, { dateStyle: "medium" }).format(
+            published
+          )}
+        </p>
         {recording.duration ? <p>{recording.duration}</p> : null}
-        <a href={COMMUNITY_MEETINGS.recordingsUrl} target="_blank" rel="noreferrer">Watch on YouTube</a>
+        <a
+          href={COMMUNITY_MEETINGS.recordingsUrl}
+          target="_blank"
+          rel="noreferrer"
+        >
+          Watch on YouTube
+        </a>
       </div>
     </article>
-  )
+  );
 }
 
 export function MeetingsPage() {
-  const [activeVideo, setActiveVideo] = useState<string | null>(null)
-  const [upcoming, setUpcoming] = useState<UpcomingMeeting[]>([])
-  const [now, setNow] = useState<Date | null>(null)
+  const [activeVideo, setActiveVideo] = useState<string | null>(null);
+  const [upcoming, setUpcoming] = useState<UpcomingMeeting[]>([]);
+  const [now, setNow] = useState<Date | null>(null);
 
   useEffect(() => {
     function refresh() {
-      const current = new Date()
-      setNow(current)
-      setUpcoming(getUpcomingOddIsoWeekMeetings(COMMUNITY_MEETINGS, UPCOMING_COUNT, current))
+      const current = new Date();
+      setNow(current);
+      setUpcoming(
+        getUpcomingOddIsoWeekMeetings(
+          COMMUNITY_MEETINGS,
+          UPCOMING_COUNT,
+          current
+        )
+      );
     }
 
-    refresh()
-    const timer = window.setInterval(refresh, COUNTDOWN_REFRESH_MS)
-    return () => window.clearInterval(timer)
-  }, [])
+    refresh();
+    const timer = window.setInterval(refresh, COUNTDOWN_REFRESH_MS);
+    return () => window.clearInterval(timer);
+  }, []);
 
-  const next = upcoming[0]
-  const countdown = now ? formatCountdown(next, now) : 'Calculating next meeting'
-  const icsHref = useMemo(() => next ? icsDownloadHref(next.date) : '#', [next])
-  const recordings = (recordingsData.recordings as Recording[]).filter(recording =>
-    new RegExp(COMMUNITY_MEETINGS.recordingTitlePattern, 'i').test(recording.title)
-  )
+  const next = upcoming[0];
+  const countdown = now
+    ? formatCountdown(next, now)
+    : "Calculating next meeting";
+  const icsHref = useMemo(
+    () => (next ? icsDownloadHref(next.date) : "#"),
+    [next]
+  );
+  const recordings = (recordingsData.recordings as Recording[]).filter(
+    recording =>
+      new RegExp(COMMUNITY_MEETINGS.recordingTitlePattern, "i").test(
+        recording.title
+      )
+  );
 
   return (
     <div className="hc-meetings-page">
-      <section className="hc-meeting-hero hc-meeting-nextHero" aria-label="Next community meeting">
+      <section
+        className="hc-meeting-hero hc-meeting-nextHero"
+        aria-label="Next community meeting"
+      >
         <div className="hc-meeting-nextHeroMain">
           <p className="hc-meeting-kicker">Next meeting</p>
           {next ? (
             <>
               <h2>{formatMeetingDate(next.date)}</h2>
-              <p className="hc-meeting-localTime">In your local time: {formatLocalDate(next.date)}</p>
-              <p className="hc-meeting-countdown" aria-live="polite">{countdown}</p>
+              <p className="hc-meeting-localTime">
+                In your local time: {formatLocalDate(next.date)}
+              </p>
+              <p className="hc-meeting-countdown" aria-live="polite">
+                {countdown}
+              </p>
               <div className="hc-meeting-actions">
-                <a className="hc-meeting-primary hc-meeting-joinNow" href={COMMUNITY_MEETINGS.meetingUrl} target="_blank" rel="noreferrer">
+                <a
+                  className="hc-meeting-primary hc-meeting-joinNow"
+                  href={COMMUNITY_MEETINGS.meetingUrl}
+                  target="_blank"
+                  rel="noreferrer"
+                >
                   Join the meeting
                 </a>
-                <span className="hc-meeting-id">Microsoft Teams · Meeting ID {COMMUNITY_MEETINGS.meetingId}</span>
-                <a href={icsHref} download={`hive-commons-community-meeting-${next.localDate}.ics`}>
+                <span className="hc-meeting-id">
+                  Microsoft Teams · Meeting ID {COMMUNITY_MEETINGS.meetingId}
+                </span>
+                <a
+                  href={icsHref}
+                  download={`hive-commons-community-meeting-${next.localDate}.ics`}
+                >
                   Download .ics
                 </a>
-                <a href={calendarHref(next.date)} target="_blank" rel="noreferrer">
+                <a
+                  href={calendarHref(next.date)}
+                  target="_blank"
+                  rel="noreferrer"
+                >
                   Google Calendar
                 </a>
               </div>
             </>
           ) : (
-            <p>The next date is being calculated from the public calendar recurrence.</p>
+            <p>
+              The next date is being calculated from the public calendar
+              recurrence.
+            </p>
           )}
         </div>
         <aside className="hc-meeting-nextHeroAside">
           <h2>Meet the people building Hive Commons.</h2>
           <p>
-            The community call happens on {COMMUNITY_MEETINGS.weekday}s in odd-numbered ISO weeks at{' '}
-            {COMMUNITY_MEETINGS.timeLabel}. You can join the video call directly, or subscribe to the group to
-            receive invites for every meeting.
+            The community call happens on {COMMUNITY_MEETINGS.weekday}s in
+            odd-numbered ISO weeks at {COMMUNITY_MEETINGS.timeLabel}. You can
+            join the video call directly, or subscribe to the group to receive
+            invites for every meeting.
           </p>
           <div className="hc-meeting-actions">
-            <a className="hc-meeting-secondary" href={COMMUNITY_MEETINGS.googleGroupUrl} target="_blank" rel="noreferrer">
+            <a
+              className="hc-meeting-secondary"
+              href={COMMUNITY_MEETINGS.googleGroupUrl}
+              target="_blank"
+              rel="noreferrer"
+            >
               Get invites every meeting — join the group
             </a>
-            <a href={COMMUNITY_MEETINGS.agendaUrl} target="_blank" rel="noreferrer">Agenda and notes</a>
+            <a
+              href={COMMUNITY_MEETINGS.agendaUrl}
+              target="_blank"
+              rel="noreferrer"
+            >
+              Agenda and notes
+            </a>
           </div>
         </aside>
       </section>
 
-      <nav className="hc-meeting-resources" aria-label="Community meeting resources">
+      <nav
+        className="hc-meeting-resources"
+        aria-label="Community meeting resources"
+      >
         <span>Resources</span>
         {RESOURCE_LINKS.map(link => (
-          <a key={link.href} href={link.href} target="_blank" rel="noreferrer">{link.label}</a>
+          <a key={link.href} href={link.href} target="_blank" rel="noreferrer">
+            {link.label}
+          </a>
         ))}
       </nav>
 
@@ -244,12 +332,24 @@ export function MeetingsPage() {
         <article className="hc-meeting-details">
           <h2>Agenda and meeting notes</h2>
           <p>
-            Add topics before the call, follow along live, and read notes from previous meetings in the shared
-            agenda document.
+            Add topics before the call, follow along live, and read notes from
+            previous meetings in the shared agenda document.
           </p>
           <div className="hc-meeting-actions">
-            <a href={COMMUNITY_MEETINGS.agendaUrl} target="_blank" rel="noreferrer">Open agenda and notes</a>
-            <a href={COMMUNITY_MEETINGS.calendarWebUrl} target="_blank" rel="noreferrer">Public calendar</a>
+            <a
+              href={COMMUNITY_MEETINGS.agendaUrl}
+              target="_blank"
+              rel="noreferrer"
+            >
+              Open agenda and notes
+            </a>
+            <a
+              href={COMMUNITY_MEETINGS.calendarWebUrl}
+              target="_blank"
+              rel="noreferrer"
+            >
+              Public calendar
+            </a>
           </div>
         </article>
 
@@ -258,7 +358,7 @@ export function MeetingsPage() {
           <ol>
             {upcoming.map(meeting => (
               <li key={meeting.localDate}>
-                <span>{formatMeetingDate(meeting.date, 'medium')}</span>
+                <span>{formatMeetingDate(meeting.date, "medium")}</span>
                 <small>{formatLocalDate(meeting.date)}</small>
               </li>
             ))}
@@ -269,19 +369,37 @@ export function MeetingsPage() {
       <section className="hc-meeting-details">
         <h2>How it self-sustains</h2>
         <ul>
-          <li>Dates are computed in {COMMUNITY_MEETINGS.timeZone} as the meeting weekday in every odd-numbered ISO week, so DST stays correct.</li>
-          <li>The source calendar is available as <a href={COMMUNITY_MEETINGS.calendarIcsUrl}>public iCal</a>.</li>
-          <li>Recordings are refreshed from the Hive Commons YouTube channel feed and merged into committed JSON by a scheduled workflow.</li>
+          <li>
+            Dates are computed in {COMMUNITY_MEETINGS.timeZone} as the meeting
+            weekday in every odd-numbered ISO week, so DST stays correct.
+          </li>
+          <li>
+            The source calendar is available as{" "}
+            <a href={COMMUNITY_MEETINGS.calendarIcsUrl}>public iCal</a>.
+          </li>
+          <li>
+            Recordings are refreshed from the Hive Commons YouTube channel feed
+            and merged into committed JSON by a scheduled workflow.
+          </li>
         </ul>
       </section>
 
-      <section className="hc-meeting-recordings" aria-labelledby="recordings-heading">
+      <section
+        className="hc-meeting-recordings"
+        aria-labelledby="recordings-heading"
+      >
         <div className="hc-meeting-sectionHead">
           <div>
             <p className="hc-meeting-kicker">Past recordings</p>
             <h2 id="recordings-heading">Watch without leaving the docs</h2>
           </div>
-          <a href={COMMUNITY_MEETINGS.recordingsUrl} target="_blank" rel="noreferrer">All recordings</a>
+          <a
+            href={COMMUNITY_MEETINGS.recordingsUrl}
+            target="_blank"
+            rel="noreferrer"
+          >
+            All recordings
+          </a>
         </div>
 
         {recordings.length > 0 ? (
@@ -296,9 +414,11 @@ export function MeetingsPage() {
             ))}
           </div>
         ) : (
-          <div className="hc-meeting-empty">Recordings will appear here after each meeting.</div>
+          <div className="hc-meeting-empty">
+            Recordings will appear here after each meeting.
+          </div>
         )}
       </section>
     </div>
-  )
+  );
 }
diff --git a/src/components/navbar/useNavDropdowns.ts b/src/components/navbar/useNavDropdowns.ts
index 077e7e8..06eb1ae 100644
--- a/src/components/navbar/useNavDropdowns.ts
+++ b/src/components/navbar/useNavDropdowns.ts
@@ -28,9 +28,7 @@ export function useNavDropdowns() {
       document.querySelectorAll<HTMLElement>("[data-dropdown]");
 
     dropdownContainers.forEach(container => {
-      const menu = container.querySelector<HTMLElement>(
-        "[data-dropdown-menu]"
-      );
+      const menu = container.querySelector<HTMLElement>("[data-dropdown-menu]");
 
       if (!menu) return;
 
diff --git a/src/config/community-meetings.ts b/src/config/community-meetings.ts
index c324728..5df5a84 100644
--- a/src/config/community-meetings.ts
+++ b/src/config/community-meetings.ts
@@ -1,33 +1,37 @@
 export type MeetingException = {
-  date: string
-  reason: string
-}
+  date: string;
+  reason: string;
+};
 
 export const COMMUNITY_MEETINGS = {
-  title: 'Hive Commons Community Meeting',
-  timeZone: 'America/New_York',
-  weekday: 'Thursday',
-  timeLabel: '10:00 AM Eastern time',
+  title: "Hive Commons Community Meeting",
+  timeZone: "America/New_York",
+  weekday: "Thursday",
+  timeLabel: "10:00 AM Eastern time",
   durationMinutes: 30,
   isoWeekday: 4,
-  isoWeekParity: 'odd',
+  isoWeekParity: "odd",
   localTime: { hour: 10, minute: 0 },
-  calendarName: 'Hive Commons',
-  calendarId: 'b43dc28a888d316aa1fe4a47bf3038cd1bca7bbb2b5cdbf5e7ecb9cc10672a95@group.calendar.google.com',
-  calendarIcsUrl: 'https://calendar.google.com/calendar/ical/b43dc28a888d316aa1fe4a47bf3038cd1bca7bbb2b5cdbf5e7ecb9cc10672a95%40group.calendar.google.com/public/basic.ics',
-  calendarWebUrl: 'https://hivecommons.dev/calendar',
-  inviteUrl: 'https://hivecommons.dev/meet',
-  agendaUrl: 'https://hivecommons.dev/agenda',
-  googleGroupUrl: 'https://hivecommons.dev/join',
-  joinUrl: 'https://hivecommons.dev/join',
-  recordingsUrl: 'https://hivecommons.dev/tv',
-  meetingUrl: 'https://teams.microsoft.com/meet/291288876243839?p=k1qddNZCd2ZLjHxXri',
-  meetingId: '291 288 876 243 839',
-  docsUrl: 'https://hivecommons.dev/docs',
-  codeUrl: 'https://hivecommons.dev/code',
-  feedUrl: 'https://www.youtube.com/feeds/videos.xml?channel_id=UCIA3fKJFv2nLoG6vKK65xLg',
-  youtubeChannelUrl: 'https://hivecommons.dev/tv',
-  youtubeChannelId: 'UCIA3fKJFv2nLoG6vKK65xLg',
-  recordingTitlePattern: 'community meeting|community call|meeting recording',
+  calendarName: "Hive Commons",
+  calendarId:
+    "b43dc28a888d316aa1fe4a47bf3038cd1bca7bbb2b5cdbf5e7ecb9cc10672a95@group.calendar.google.com",
+  calendarIcsUrl:
+    "https://calendar.google.com/calendar/ical/b43dc28a888d316aa1fe4a47bf3038cd1bca7bbb2b5cdbf5e7ecb9cc10672a95%40group.calendar.google.com/public/basic.ics",
+  calendarWebUrl: "https://hivecommons.dev/calendar",
+  inviteUrl: "https://hivecommons.dev/meet",
+  agendaUrl: "https://hivecommons.dev/agenda",
+  googleGroupUrl: "https://hivecommons.dev/join",
+  joinUrl: "https://hivecommons.dev/join",
+  recordingsUrl: "https://hivecommons.dev/tv",
+  meetingUrl:
+    "https://teams.microsoft.com/meet/291288876243839?p=k1qddNZCd2ZLjHxXri",
+  meetingId: "291 288 876 243 839",
+  docsUrl: "https://hivecommons.dev/docs",
+  codeUrl: "https://hivecommons.dev/code",
+  feedUrl:
+    "https://www.youtube.com/feeds/videos.xml?channel_id=UCIA3fKJFv2nLoG6vKK65xLg",
+  youtubeChannelUrl: "https://hivecommons.dev/tv",
+  youtubeChannelId: "UCIA3fKJFv2nLoG6vKK65xLg",
+  recordingTitlePattern: "community meeting|community call|meeting recording",
   exceptions: [] as MeetingException[],
-} as const
+} as const;
diff --git a/src/config/versions.ts b/src/config/versions.ts
index b90760a..6da2251 100644
--- a/src/config/versions.ts
+++ b/src/config/versions.ts
@@ -12,31 +12,38 @@
 //   default together.
 
 // Netlify site name for branch deploys
-export const NETLIFY_SITE_NAME = "hivecommons-docs"
+export const NETLIFY_SITE_NAME = "hivecommons-docs";
 
 // Production URL for latest version
-export const PRODUCTION_URL = "https://docs.hivecommons.dev"
+export const PRODUCTION_URL = "https://docs.hivecommons.dev";
 
 // Project identifiers
-export type ProjectId = "hive" | "hotshot" | "pluk" | "rationguard" | "promptargs" | "dibs" | "spektacular"
+export type ProjectId =
+  | "hive"
+  | "hotshot"
+  | "pluk"
+  | "rationguard"
+  | "promptargs"
+  | "dibs"
+  | "spektacular";
 
 // Version info structure
 export interface VersionInfo {
-  label: string
-  branch: string
-  isDefault: boolean
-  externalUrl?: string
-  isDev?: boolean // marks development/unreleased versions
+  label: string;
+  branch: string;
+  isDefault: boolean;
+  externalUrl?: string;
+  isDev?: boolean; // marks development/unreleased versions
 }
 
 // Project configuration
 export interface ProjectConfig {
-  id: ProjectId
-  name: string
-  basePath: string
-  currentVersion: string
-  contentPath: string
-  versions: Record<string, VersionInfo>
+  id: ProjectId;
+  name: string;
+  basePath: string;
+  currentVersion: string;
+  contentPath: string;
+  versions: Record<string, VersionInfo>;
 }
 
 // hive versions
@@ -59,7 +66,7 @@ const HIVE_VERSIONS: Record<string, VersionInfo> = {
     isDefault: false,
     externalUrl: "https://github.com/hivecommons/hive/tree/v4/src/docs",
   },
-}
+};
 
 // hotshot versions
 const HOTSHOT_VERSIONS: Record<string, VersionInfo> = {
@@ -68,7 +75,7 @@ const HOTSHOT_VERSIONS: Record<string, VersionInfo> = {
     branch: "main",
     isDefault: true,
   },
-}
+};
 
 // pluk versions
 const PLUK_VERSIONS: Record<string, VersionInfo> = {
@@ -77,7 +84,7 @@ const PLUK_VERSIONS: Record<string, VersionInfo> = {
     branch: "main",
     isDefault: true,
   },
-}
+};
 
 // rationguard versions
 const RATIONGUARD_VERSIONS: Record<string, VersionInfo> = {
@@ -86,7 +93,7 @@ const RATIONGUARD_VERSIONS: Record<string, VersionInfo> = {
     branch: "main",
     isDefault: true,
   },
-}
+};
 
 // promptargs versions
 const PROMPTARGS_VERSIONS: Record<string, VersionInfo> = {
@@ -95,7 +102,7 @@ const PROMPTARGS_VERSIONS: Record<string, VersionInfo> = {
     branch: "main",
     isDefault: true,
   },
-}
+};
 
 // dibs versions
 const DIBS_VERSIONS: Record<string, VersionInfo> = {
@@ -104,7 +111,7 @@ const DIBS_VERSIONS: Record<string, VersionInfo> = {
     branch: "main",
     isDefault: true,
   },
-}
+};
 
 // spektacular versions (canonical site: https://spektacular.dev)
 const SPEKTACULAR_VERSIONS: Record<string, VersionInfo> = {
@@ -113,7 +120,7 @@ const SPEKTACULAR_VERSIONS: Record<string, VersionInfo> = {
     branch: "main",
     isDefault: true,
   },
-}
+};
 
 // All projects configuration
 export const PROJECTS: Record<ProjectId, ProjectConfig> = {
@@ -173,100 +180,103 @@ export const PROJECTS: Record<ProjectId, ProjectConfig> = {
     contentPath: "docs/content/spektacular",
     versions: SPEKTACULAR_VERSIONS,
   },
-}
+};
 
 // Get project from URL pathname
 export function getProjectFromPath(pathname: string): ProjectConfig {
   if (pathname.startsWith("/docs/hotshot")) {
-    return PROJECTS.hotshot
+    return PROJECTS.hotshot;
   }
   if (pathname.startsWith("/docs/pluk")) {
-    return PROJECTS.pluk
+    return PROJECTS.pluk;
   }
   if (pathname.startsWith("/docs/rationguard")) {
-    return PROJECTS.rationguard
+    return PROJECTS.rationguard;
   }
   if (pathname.startsWith("/docs/promptargs")) {
-    return PROJECTS.promptargs
+    return PROJECTS.promptargs;
   }
   if (pathname.startsWith("/docs/dibs")) {
-    return PROJECTS.dibs
+    return PROJECTS.dibs;
   }
   if (pathname.startsWith("/docs/spektacular")) {
-    return PROJECTS.spektacular
+    return PROJECTS.spektacular;
   }
-  return PROJECTS.hive
+  return PROJECTS.hive;
 }
 
 // Get project by ID
 export function getProject(projectId: ProjectId): ProjectConfig {
-  return PROJECTS[projectId]
+  return PROJECTS[projectId];
 }
 
 // Get all projects
 export function getAllProjects(): ProjectConfig[] {
-  return Object.values(PROJECTS)
+  return Object.values(PROJECTS);
 }
 
 // ============================================
 // Backwards-compatible exports (hive is the flagship project)
 // ============================================
 
-export const CURRENT_VERSION = PROJECTS.hive.currentVersion
-export const VERSIONS = HIVE_VERSIONS
+export const CURRENT_VERSION = PROJECTS.hive.currentVersion;
+export const VERSIONS = HIVE_VERSIONS;
 
-export type VersionKey = keyof typeof HIVE_VERSIONS
+export type VersionKey = keyof typeof HIVE_VERSIONS;
 
 export function getDefaultVersion(): VersionKey {
-  return "latest"
+  return "latest";
 }
 
 export function getCurrentVersion(): string {
-  return CURRENT_VERSION
+  return CURRENT_VERSION;
 }
 
 export function getBranchForVersion(version: VersionKey): string {
-  return HIVE_VERSIONS[version]?.branch ?? "main"
+  return HIVE_VERSIONS[version]?.branch ?? "main";
 }
 
 export function getVersionFromBranch(branch: string): VersionKey | null {
   for (const [key, value] of Object.entries(HIVE_VERSIONS)) {
     if (value.branch === branch) {
-      return key as VersionKey
+      return key as VersionKey;
     }
   }
 
   // Check if branch matches docs/{version} pattern
-  const match = branch.match(/^docs\/(.+)$/)
+  const match = branch.match(/^docs\/(.+)$/);
   if (match) {
-    const versionNum = match[1]
+    const versionNum = match[1];
     // Find version entry with matching branch
     for (const [key, value] of Object.entries(HIVE_VERSIONS)) {
       if (value.branch === branch || key === versionNum) {
-        return key as VersionKey
+        return key as VersionKey;
       }
     }
   }
 
   // Check for main branch
   if (branch === "main" || branch === "master") {
-    return "latest"
+    return "latest";
   }
 
-  return null
+  return null;
 }
 
 export function getAllVersions(): Array<{ key: VersionKey } & VersionInfo> {
   return Object.entries(HIVE_VERSIONS).map(([key, value]) => ({
     key: key as VersionKey,
     ...value,
-  }))
+  }));
 }
 
 // Helper to validate if a branch name follows version convention
 export function isVersionBranch(branch: string): boolean {
-  return branch === "main" || branch.startsWith("docs/") ||
+  return (
+    branch === "main" ||
+    branch.startsWith("docs/") ||
     Object.values(HIVE_VERSIONS).some(version => version.branch === branch)
+  );
 }
 
 // Get the URL for a specific version (project-aware)
@@ -275,38 +285,38 @@ export function getVersionUrl(
   pathname: string = "/docs",
   projectId: ProjectId = "hive"
 ): string {
-  const project = PROJECTS[projectId]
-  const version = project.versions[versionKey]
+  const project = PROJECTS[projectId];
+  const version = project.versions[versionKey];
 
   if (!version) {
-    return `${PRODUCTION_URL}${pathname}`
+    return `${PRODUCTION_URL}${pathname}`;
   }
 
   // If it has an external URL, use that
   if ("externalUrl" in version && version.externalUrl) {
-    return version.externalUrl
+    return version.externalUrl;
   }
 
   // Latest version uses production URL
   if (versionKey === "latest" || version.isDefault) {
-    return `${PRODUCTION_URL}${pathname}`
+    return `${PRODUCTION_URL}${pathname}`;
   }
 
   // Other versions use Netlify branch deploys
   // Netlify converts branch names: docs/0.28.0 -> docs-0-28-0
-  const branchSlug = version.branch.replace(/\//g, "-").replace(/\./g, "-")
-  return `https://${branchSlug}--${NETLIFY_SITE_NAME}.netlify.app${pathname}`
+  const branchSlug = version.branch.replace(/\//g, "-").replace(/\./g, "-");
+  return `https://${branchSlug}--${NETLIFY_SITE_NAME}.netlify.app${pathname}`;
 }
 
 // Get versions for a specific project
 export function getProjectVersions(
   projectId: ProjectId
 ): Array<{ key: string } & VersionInfo> {
-  const project = PROJECTS[projectId]
+  const project = PROJECTS[projectId];
   return Object.entries(project.versions).map(([key, value]) => ({
     key,
     ...value,
-  }))
+  }));
 }
 
 // Check if a version has been migrated (branch exists)
@@ -314,14 +324,14 @@ export function isVersionMigrated(
   versionKey: string,
   projectId: ProjectId = "hive"
 ): boolean {
-  const project = PROJECTS[projectId]
+  const project = PROJECTS[projectId];
 
   // Latest is always available
-  if (versionKey === "latest") return true
+  if (versionKey === "latest") return true;
 
   // Legacy links externally, so it's "available"
-  if (versionKey === "legacy") return true
+  if (versionKey === "legacy") return true;
 
   // For other versions, assume they exist if in the versions list
-  return versionKey in project.versions
+  return versionKey in project.versions;
 }
diff --git a/src/hooks/useSharedConfig.ts b/src/hooks/useSharedConfig.ts
index 0ddff96..67e10dd 100644
--- a/src/hooks/useSharedConfig.ts
+++ b/src/hooks/useSharedConfig.ts
@@ -1,9 +1,9 @@
 "use client";
 
-import { useState, useEffect } from 'react';
+import { useState, useEffect } from "react";
 
 // Production URL for fetching shared config
-const PRODUCTION_CONFIG_URL = 'https://docs.hivecommons.dev/config/shared.json';
+const PRODUCTION_CONFIG_URL = "https://docs.hivecommons.dev/config/shared.json";
 
 // Cache TTL - config will be refreshed after this time
 const CACHE_TTL_MS = 5 * 60 * 1000; // 5 minutes
@@ -57,7 +57,10 @@ function mergeVersionMaps(
   primary: Record<string, Record<string, VersionInfo>> = {},
   secondary: Record<string, Record<string, VersionInfo>> = {}
 ): Record<string, Record<string, VersionInfo>> {
-  const mergedProjects = new Set([...Object.keys(secondary), ...Object.keys(primary)]);
+  const mergedProjects = new Set([
+    ...Object.keys(secondary),
+    ...Object.keys(primary),
+  ]);
   const merged: Record<string, Record<string, VersionInfo>> = {};
 
   for (const projectId of mergedProjects) {
@@ -70,7 +73,10 @@ function mergeVersionMaps(
   return merged;
 }
 
-function mergeSharedConfigs(primary: SharedConfig, secondary: SharedConfig): SharedConfig {
+function mergeSharedConfigs(
+  primary: SharedConfig,
+  secondary: SharedConfig
+): SharedConfig {
   const primaryTimestamp = getConfigTimestamp(primary);
   const secondaryTimestamp = getConfigTimestamp(secondary);
 
@@ -81,18 +87,25 @@ function mergeSharedConfigs(primary: SharedConfig, secondary: SharedConfig): Sha
       ...(primary.projects ?? {}),
     },
     relatedProjects:
-      primary.relatedProjects.length > 0 ? primary.relatedProjects : secondary.relatedProjects,
+      primary.relatedProjects.length > 0
+        ? primary.relatedProjects
+        : secondary.relatedProjects,
     editBaseUrls: {
       ...(secondary.editBaseUrls ?? {}),
       ...(primary.editBaseUrls ?? {}),
     },
     surveyUrl: primary.surveyUrl ?? secondary.surveyUrl,
     updatedAt:
-      primaryTimestamp >= secondaryTimestamp ? primary.updatedAt : secondary.updatedAt,
+      primaryTimestamp >= secondaryTimestamp
+        ? primary.updatedAt
+        : secondary.updatedAt,
   };
 }
 
-async function fetchConfigJson(url: string, init?: RequestInit): Promise<SharedConfig | null> {
+async function fetchConfigJson(
+  url: string,
+  init?: RequestInit
+): Promise<SharedConfig | null> {
   const res = await fetch(url, init);
   if (!res.ok) {
     return null;
@@ -103,10 +116,12 @@ async function fetchConfigJson(url: string, init?: RequestInit): Promise<SharedC
 
 // Check if cache is still valid
 function isCacheValid(): boolean {
-  return configCache !== null && (Date.now() - cacheTimestamp) < CACHE_TTL_MS;
+  return configCache !== null && Date.now() - cacheTimestamp < CACHE_TTL_MS;
 }
 
-async function fetchConfig(forceRefresh: boolean = false): Promise<SharedConfig | null> {
+async function fetchConfig(
+  forceRefresh: boolean = false
+): Promise<SharedConfig | null> {
   // Return cached config if still valid and not forcing refresh
   if (!forceRefresh && isCacheValid()) {
     return configCache;
@@ -119,17 +134,17 @@ async function fetchConfig(forceRefresh: boolean = false): Promise<SharedConfig
 
   fetchPromise = (async () => {
     const [localConfig, productionConfig] = await Promise.all([
-      fetchConfigJson('/config/shared.json').catch((e) => {
-        console.warn('Failed to fetch local config:', e);
+      fetchConfigJson("/config/shared.json").catch(e => {
+        console.warn("Failed to fetch local config:", e);
         return null;
       }),
       fetchConfigJson(PRODUCTION_CONFIG_URL, {
-        cache: 'no-store',
+        cache: "no-store",
         headers: {
-          Accept: 'application/json',
+          Accept: "application/json",
         },
-      }).catch((e) => {
-        console.warn('Failed to fetch config from production:', e);
+      }).catch(e => {
+        console.warn("Failed to fetch config from production:", e);
         return null;
       }),
     ]);
@@ -158,7 +173,9 @@ async function fetchConfig(forceRefresh: boolean = false): Promise<SharedConfig
 }
 
 export function useSharedConfig() {
-  const [config, setConfig] = useState<SharedConfig | null>(isCacheValid() ? configCache : null);
+  const [config, setConfig] = useState<SharedConfig | null>(
+    isCacheValid() ? configCache : null
+  );
   const [loading, setLoading] = useState(!isCacheValid());
   const [error, setError] = useState<Error | null>(null);
 
@@ -173,13 +190,13 @@ export function useSharedConfig() {
     let mounted = true;
 
     fetchConfig()
-      .then((data) => {
+      .then(data => {
         if (mounted) {
           setConfig(data);
           setLoading(false);
         }
       })
-      .catch((err) => {
+      .catch(err => {
         if (mounted) {
           setError(err);
           setLoading(false);
@@ -227,13 +244,13 @@ export function getEditUrl(
     return null;
   }
   // Remove leading slash if present
-  const cleanPath = filePath.startsWith('/') ? filePath.slice(1) : filePath;
+  const cleanPath = filePath.startsWith("/") ? filePath.slice(1) : filePath;
   return `${config.editBaseUrls[projectId]}/${cleanPath}`;
 }
 
 // Get survey URL from config or fallback to redirect
 export function getSurveyUrl(config: SharedConfig | null): string {
-  return config?.surveyUrl ?? 'https://docs.hivecommons.dev/survey';
+  return config?.surveyUrl ?? "https://docs.hivecommons.dev/survey";
 }
 
 // Export the fetch function for server-side usage
diff --git a/src/lib/communityMeetingsSchedule.ts b/src/lib/communityMeetingsSchedule.ts
index 4008949..18479c2 100644
--- a/src/lib/communityMeetingsSchedule.ts
+++ b/src/lib/communityMeetingsSchedule.ts
@@ -1,107 +1,140 @@
 export type MeetingException = {
-  date: string
-  reason: string
-}
+  date: string;
+  reason: string;
+};
 
 export type MeetingScheduleConfig = {
-  timeZone: string
-  isoWeekday: number
-  localTime: { hour: number; minute: number }
-  durationMinutes: number
-  exceptions: MeetingException[]
-}
+  timeZone: string;
+  isoWeekday: number;
+  localTime: { hour: number; minute: number };
+  durationMinutes: number;
+  exceptions: MeetingException[];
+};
 
 export type UpcomingMeeting = {
-  date: Date
-  localDate: string
-}
+  date: Date;
+  localDate: string;
+};
 
-const DATE_PARTS = ['year', 'month', 'day', 'hour', 'minute', 'second'] as const
-const MS_PER_DAY = 86_400_000
+const DATE_PARTS = [
+  "year",
+  "month",
+  "day",
+  "hour",
+  "minute",
+  "second",
+] as const;
+const MS_PER_DAY = 86_400_000;
 
 export function getTimeZoneParts(date: Date, timeZone: string) {
-  const formatter = new Intl.DateTimeFormat('en-US', {
+  const formatter = new Intl.DateTimeFormat("en-US", {
     timeZone,
     hour12: false,
-    year: 'numeric',
-    month: '2-digit',
-    day: '2-digit',
-    hour: '2-digit',
-    minute: '2-digit',
-    second: '2-digit',
-  })
+    year: "numeric",
+    month: "2-digit",
+    day: "2-digit",
+    hour: "2-digit",
+    minute: "2-digit",
+    second: "2-digit",
+  });
 
   const parts = Object.fromEntries(
-    formatter.formatToParts(date)
-      .filter(part => DATE_PARTS.includes(part.type as typeof DATE_PARTS[number]))
+    formatter
+      .formatToParts(date)
+      .filter(part =>
+        DATE_PARTS.includes(part.type as (typeof DATE_PARTS)[number])
+      )
       .map(part => [part.type, Number(part.value)])
-  ) as Record<typeof DATE_PARTS[number], number>
+  ) as Record<(typeof DATE_PARTS)[number], number>;
 
-  return { ...parts, hour: parts.hour === 24 ? 0 : parts.hour }
+  return { ...parts, hour: parts.hour === 24 ? 0 : parts.hour };
 }
 
-export function zonedTimeToDate(date: string, hour: number, minute: number, timeZone: string) {
-  const [year, month, day] = date.split('-').map(Number)
-  let utc = Date.UTC(year, month - 1, day, hour, minute)
+export function zonedTimeToDate(
+  date: string,
+  hour: number,
+  minute: number,
+  timeZone: string
+) {
+  const [year, month, day] = date.split("-").map(Number);
+  let utc = Date.UTC(year, month - 1, day, hour, minute);
 
   for (let i = 0; i < 3; i += 1) {
-    const parts = getTimeZoneParts(new Date(utc), timeZone)
-    const asUtc = Date.UTC(parts.year, parts.month - 1, parts.day, parts.hour, parts.minute, parts.second)
-    const wanted = Date.UTC(year, month - 1, day, hour, minute, 0)
-    utc += wanted - asUtc
+    const parts = getTimeZoneParts(new Date(utc), timeZone);
+    const asUtc = Date.UTC(
+      parts.year,
+      parts.month - 1,
+      parts.day,
+      parts.hour,
+      parts.minute,
+      parts.second
+    );
+    const wanted = Date.UTC(year, month - 1, day, hour, minute, 0);
+    utc += wanted - asUtc;
   }
 
-  return new Date(utc)
+  return new Date(utc);
 }
 
 export function addDays(date: string, days: number) {
-  const [year, month, day] = date.split('-').map(Number)
-  const next = new Date(Date.UTC(year, month - 1, day + days))
-  return next.toISOString().slice(0, 10)
+  const [year, month, day] = date.split("-").map(Number);
+  const next = new Date(Date.UTC(year, month - 1, day + days));
+  return next.toISOString().slice(0, 10);
 }
 
 export function isoWeekInfo(localDate: string) {
-  const [year, month, day] = localDate.split('-').map(Number)
-  const date = new Date(Date.UTC(year, month - 1, day))
-  const isoWeekday = date.getUTCDay() || 7
-  date.setUTCDate(date.getUTCDate() + 4 - isoWeekday)
-  const isoYear = date.getUTCFullYear()
-  const yearStart = new Date(Date.UTC(isoYear, 0, 1))
-  const week = Math.ceil((((date.getTime() - yearStart.getTime()) / MS_PER_DAY) + 1) / 7)
-  return { isoYear, week, isoWeekday }
+  const [year, month, day] = localDate.split("-").map(Number);
+  const date = new Date(Date.UTC(year, month - 1, day));
+  const isoWeekday = date.getUTCDay() || 7;
+  date.setUTCDate(date.getUTCDate() + 4 - isoWeekday);
+  const isoYear = date.getUTCFullYear();
+  const yearStart = new Date(Date.UTC(isoYear, 0, 1));
+  const week = Math.ceil(
+    ((date.getTime() - yearStart.getTime()) / MS_PER_DAY + 1) / 7
+  );
+  return { isoYear, week, isoWeekday };
 }
 
 export function getLocalDateInTimeZone(now: Date, timeZone: string) {
-  const parts = getTimeZoneParts(now, timeZone)
+  const parts = getTimeZoneParts(now, timeZone);
   return [
-    String(parts.year).padStart(4, '0'),
-    String(parts.month).padStart(2, '0'),
-    String(parts.day).padStart(2, '0'),
-  ].join('-')
+    String(parts.year).padStart(4, "0"),
+    String(parts.month).padStart(2, "0"),
+    String(parts.day).padStart(2, "0"),
+  ].join("-");
 }
 
 export function getUpcomingOddIsoWeekMeetings(
   config: MeetingScheduleConfig,
   count: number,
-  now = new Date(),
+  now = new Date()
 ): UpcomingMeeting[] {
-  const cancelled = new Set(config.exceptions.map(item => item.date))
-  const upcoming: UpcomingMeeting[] = []
-  let localDate = addDays(getLocalDateInTimeZone(now, config.timeZone), -1)
-  let scannedDays = 0
+  const cancelled = new Set(config.exceptions.map(item => item.date));
+  const upcoming: UpcomingMeeting[] = [];
+  let localDate = addDays(getLocalDateInTimeZone(now, config.timeZone), -1);
+  let scannedDays = 0;
 
   while (upcoming.length < count && scannedDays < 370 * 3) {
-    const info = isoWeekInfo(localDate)
-    if (info.isoWeekday === config.isoWeekday && info.week % 2 === 1 && !cancelled.has(localDate)) {
-      const date = zonedTimeToDate(localDate, config.localTime.hour, config.localTime.minute, config.timeZone)
-      const end = date.getTime() + config.durationMinutes * 60_000
+    const info = isoWeekInfo(localDate);
+    if (
+      info.isoWeekday === config.isoWeekday &&
+      info.week % 2 === 1 &&
+      !cancelled.has(localDate)
+    ) {
+      const date = zonedTimeToDate(
+        localDate,
+        config.localTime.hour,
+        config.localTime.minute,
+        config.timeZone
+      );
+      const end = date.getTime() + config.durationMinutes * 60_000;
       if (end >= now.getTime()) {
-        upcoming.push({ date, localDate })
+        upcoming.push({ date, localDate });
       }
     }
-    localDate = addDays(localDate, 1)
-    scannedDays += 1
+    localDate = addDays(localDate, 1);
+    scannedDays += 1;
   }
 
-  return upcoming
+  return upcoming;
 }
diff --git a/src/lib/logger.ts b/src/lib/logger.ts
index c826b72..b83c6da 100644
--- a/src/lib/logger.ts
+++ b/src/lib/logger.ts
@@ -10,12 +10,12 @@
  */
 
 export type LogFields = {
-  route: string
-  method?: string
-  status?: number
-  durationMs?: number
-  error?: string
-}
+  route: string;
+  method?: string;
+  status?: number;
+  durationMs?: number;
+  error?: string;
+};
 
 function write(level: "info" | "error", message: string, fields: LogFields) {
   const record = {
@@ -23,27 +23,27 @@ function write(level: "info" | "error", message: string, fields: LogFields) {
     time: new Date().toISOString(),
     message,
     ...fields,
-  }
-  const line = JSON.stringify(record)
+  };
+  const line = JSON.stringify(record);
   // Repo lint policy only allows console.warn/console.error (no-console), so
   // info-level records are emitted via console.warn rather than console.log.
   if (level === "error") {
-    console.error(line)
+    console.error(line);
   } else {
-    console.warn(line)
+    console.warn(line);
   }
 }
 
 export const logger = {
   info(message: string, fields: LogFields) {
-    write("info", message, fields)
+    write("info", message, fields);
   },
   /** Truncates `error` to keep log lines bounded (no stack traces / raw payloads). */
   error(message: string, fields: LogFields) {
     const truncated =
       fields.error && fields.error.length > 300
         ? `${fields.error.slice(0, 300)}...`
-        : fields.error
-    write("error", message, { ...fields, error: truncated })
+        : fields.error;
+    write("error", message, { ...fields, error: truncated });
   },
-}
+};
diff --git a/src/lib/metrics.ts b/src/lib/metrics.ts
index 699d288..3af7c12 100644
--- a/src/lib/metrics.ts
+++ b/src/lib/metrics.ts
@@ -13,10 +13,10 @@
  * one of "2xx"/"3xx"/"4xx"/"5xx"/"other". Label cardinality is therefore
  * bounded independently of request input.
  */
-import { Counter, Histogram, Registry } from "prom-client"
+import { Counter, Histogram, Registry } from "prom-client";
 
-export const ApiRoutes = ["search", "docs-image"] as const
-export type ApiRoute = (typeof ApiRoutes)[number]
+export const ApiRoutes = ["search", "docs-image"] as const;
+export type ApiRoute = (typeof ApiRoutes)[number];
 
 const HTTP_METHODS = new Set([
   "CONNECT",
@@ -28,16 +28,16 @@ const HTTP_METHODS = new Set([
   "POST",
   "PUT",
   "TRACE",
-])
+]);
 
-export const metricsRegistry = new Registry()
+export const metricsRegistry = new Registry();
 
 export const httpRequestsTotal = new Counter({
   name: "docs_api_requests_total",
   help: "Total number of docs site API requests handled, by route and status class.",
   labelNames: ["route", "method", "status_class"] as const,
   registers: [metricsRegistry],
-})
+});
 
 export const httpRequestDurationSeconds = new Histogram({
   name: "docs_api_request_duration_seconds",
@@ -45,19 +45,19 @@ export const httpRequestDurationSeconds = new Histogram({
   labelNames: ["route", "method"] as const,
   buckets: [0.01, 0.05, 0.1, 0.25, 0.5, 1, 2.5, 5],
   registers: [metricsRegistry],
-})
+});
 
 function statusClass(status: number): "2xx" | "3xx" | "4xx" | "5xx" | "other" {
-  if (status >= 200 && status < 300) return "2xx"
-  if (status >= 300 && status < 400) return "3xx"
-  if (status >= 400 && status < 500) return "4xx"
-  if (status >= 500 && status < 600) return "5xx"
-  return "other"
+  if (status >= 200 && status < 300) return "2xx";
+  if (status >= 300 && status < 400) return "3xx";
+  if (status >= 400 && status < 500) return "4xx";
+  if (status >= 500 && status < 600) return "5xx";
+  return "other";
 }
 
 function methodLabel(method: string): string {
-  const normalizedMethod = method.toUpperCase()
-  return HTTP_METHODS.has(normalizedMethod) ? normalizedMethod : "OTHER"
+  const normalizedMethod = method.toUpperCase();
+  return HTTP_METHODS.has(normalizedMethod) ? normalizedMethod : "OTHER";
 }
 
 /** Records one completed request. `durationMs` comes from a monotonic timer at the call site. */
@@ -71,10 +71,10 @@ export function recordApiRequest(
     route,
     method: methodLabel(method),
     status_class: statusClass(status),
-  }
-  httpRequestsTotal.inc(labels)
+  };
+  httpRequestsTotal.inc(labels);
   httpRequestDurationSeconds.observe(
     { route, method: labels.method },
     Math.max(0, durationMs) / 1000
-  )
+  );
 }
diff --git a/src/lib/remarkStripMdxJs.ts b/src/lib/remarkStripMdxJs.ts
index 7896f06..f83dea4 100644
--- a/src/lib/remarkStripMdxJs.ts
+++ b/src/lib/remarkStripMdxJs.ts
@@ -18,47 +18,56 @@
  * dependencies of nextra, and a structural subset is all that is needed.
  */
 
-export const MDX_JS_NODE_TYPES = new Set(['mdxjsEsm', 'mdxFlowExpression', 'mdxTextExpression'])
+export const MDX_JS_NODE_TYPES = new Set([
+  "mdxjsEsm",
+  "mdxFlowExpression",
+  "mdxTextExpression",
+]);
 
-export const MDX_JSX_NODE_TYPES = new Set(['mdxJsxFlowElement', 'mdxJsxTextElement'])
+export const MDX_JSX_NODE_TYPES = new Set([
+  "mdxJsxFlowElement",
+  "mdxJsxTextElement",
+]);
 
 interface JsxAttributeLike {
-  type: string
-  value?: unknown
+  type: string;
+  value?: unknown;
 }
 
 interface NodeLike {
-  type: string
-  children?: NodeLike[]
-  attributes?: JsxAttributeLike[]
+  type: string;
+  children?: NodeLike[];
+  attributes?: JsxAttributeLike[];
 }
 
 /** True for a JSX attribute whose value is JavaScript rather than a literal. */
 function isJsAttribute(attr: JsxAttributeLike): boolean {
-  if (attr.type === 'mdxJsxExpressionAttribute') return true
-  const value = attr.value
+  if (attr.type === "mdxJsxExpressionAttribute") return true;
+  const value = attr.value;
   return (
-    typeof value === 'object' &&
+    typeof value === "object" &&
     value !== null &&
-    (value as { type?: unknown }).type === 'mdxJsxAttributeValueExpression'
-  )
+    (value as { type?: unknown }).type === "mdxJsxAttributeValueExpression"
+  );
 }
 
 /** Strips MDX JS nodes from `tree` in place and returns it. */
 export function stripMdxJs<T extends NodeLike>(tree: T): T {
   if (MDX_JSX_NODE_TYPES.has(tree.type) && Array.isArray(tree.attributes)) {
-    tree.attributes = tree.attributes.filter((attr) => !isJsAttribute(attr))
+    tree.attributes = tree.attributes.filter(attr => !isJsAttribute(attr));
   }
   if (Array.isArray(tree.children)) {
-    tree.children = tree.children.filter((child) => !MDX_JS_NODE_TYPES.has(child.type))
-    for (const child of tree.children) stripMdxJs(child)
+    tree.children = tree.children.filter(
+      child => !MDX_JS_NODE_TYPES.has(child.type)
+    );
+    for (const child of tree.children) stripMdxJs(child);
   }
-  return tree
+  return tree;
 }
 
 /** Remark plugin form of {@link stripMdxJs}. */
 export function remarkStripMdxJs() {
   return (tree: NodeLike) => {
-    stripMdxJs(tree)
-  }
+    stripMdxJs(tree);
+  };
 }
diff --git a/src/lib/rewriteImagePaths.ts b/src/lib/rewriteImagePaths.ts
index 75b381b..a264793 100644
--- a/src/lib/rewriteImagePaths.ts
+++ b/src/lib/rewriteImagePaths.ts
@@ -12,23 +12,28 @@
  *                 or "hive").  Pass an empty string when the file lives directly
  *                 under docs/content/.
  */
-export function rewriteRelativeImagePaths(content: string, baseDir: string): string {
+export function rewriteRelativeImagePaths(
+  content: string,
+  baseDir: string
+): string {
   return content.replace(
     /!\[([^\]]*)\]\(([^)]+)\)/g,
     (match, alt: string, src: string) => {
-      const trimmed = src.trim()
+      const trimmed = src.trim();
       // Leave absolute URLs, absolute paths, data URIs, and anchor-only refs unchanged.
       if (
-        trimmed.startsWith('/') ||
+        trimmed.startsWith("/") ||
         /^https?:\/\//.test(trimmed) ||
-        trimmed.startsWith('data:') ||
-        trimmed.startsWith('#')
+        trimmed.startsWith("data:") ||
+        trimmed.startsWith("#")
       ) {
-        return match
+        return match;
       }
-      const normalised = trimmed.replace(/^\.\//, '')
-      const apiPath = baseDir ? `/docs-images/${baseDir}/${normalised}` : `/docs-images/${normalised}`
-      return `![${alt}](${apiPath})`
+      const normalised = trimmed.replace(/^\.\//, "");
+      const apiPath = baseDir
+        ? `/docs-images/${baseDir}/${normalised}`
+        : `/docs-images/${normalised}`;
+      return `![${alt}](${apiPath})`;
     }
-  )
+  );
 }
diff --git a/src/lib/sanitizeHtml.ts b/src/lib/sanitizeHtml.ts
index 40d718c..5f03c1c 100644
--- a/src/lib/sanitizeHtml.ts
+++ b/src/lib/sanitizeHtml.ts
@@ -10,103 +10,105 @@
 // Prevents bypass of multi-character patterns via nested/interleaved input
 // (e.g. <scr<script>ipt> → after one pass → <script>; loop catches the remainder).
 export function stripUntilStable(content: string, pattern: RegExp): string {
-  let prev = ''
+  let prev = "";
   while (content !== prev) {
-    prev = content
-    content = content.replace(pattern, '')
+    prev = content;
+    content = content.replace(pattern, "");
   }
-  return content
+  return content;
 }
 
 export function removeCommentPatterns(content: string): string {
-  let cleaned = content
+  let cleaned = content;
 
   // Remove all HTML comments — loop until stable to prevent partial-comment bypass
-  let prev = ''
+  let prev = "";
   while (cleaned !== prev) {
-    prev = cleaned
-    cleaned = cleaned.replace(/<!--[\s\S]*?-->/g, '')
+    prev = cleaned;
+    cleaned = cleaned.replace(/<!--[\s\S]*?-->/g, "");
   }
   // Remove any residual comment openers that were not closed (loop until stable)
-  prev = ''
+  prev = "";
   while (cleaned !== prev) {
-    prev = cleaned
-    cleaned = cleaned.replace(/<!--[\s\S]*/g, '')
+    prev = cleaned;
+    cleaned = cleaned.replace(/<!--[\s\S]*/g, "");
   }
 
   // Remove Jinja-style comments
-  cleaned = cleaned.replace(/\{#[\s\S]*?#\}/g, '')
+  cleaned = cleaned.replace(/\{#[\s\S]*?#\}/g, "");
 
   // Remove JSX-style comments that aren't valid
-  cleaned = cleaned.replace(/\{\/[^}]*\/\}/g, '')
+  cleaned = cleaned.replace(/\{\/[^}]*\/\}/g, "");
 
-  return cleaned
+  return cleaned;
 }
 
 // Escape HTML special characters so that extracted attribute values cannot
 // re-introduce HTML tags or break out of attribute context.
 function escapeAngle(s: string): string {
   return s
-    .replace(/&/g, '&amp;')
-    .replace(/</g, '&lt;')
-    .replace(/>/g, '&gt;')
-    .replace(/"/g, '&quot;')
+    .replace(/&/g, "&amp;")
+    .replace(/</g, "&lt;")
+    .replace(/>/g, "&gt;")
+    .replace(/"/g, "&quot;");
 }
 
 const MDX_SAFE_TEXT_TAGS = new Set([
-  'a',
-  'blockquote',
-  'br',
-  'code',
-  'details',
-  'div',
-  'em',
-  'h1',
-  'h2',
-  'h3',
-  'h4',
-  'h5',
-  'h6',
-  'hr',
-  'img',
-  'kbd',
-  'li',
-  'ol',
-  'p',
-  'pre',
-  'span',
-  'strong',
-  'summary',
-  'table',
-  'tbody',
-  'td',
-  'th',
-  'thead',
-  'tr',
-  'ul',
-])
+  "a",
+  "blockquote",
+  "br",
+  "code",
+  "details",
+  "div",
+  "em",
+  "h1",
+  "h2",
+  "h3",
+  "h4",
+  "h5",
+  "h6",
+  "hr",
+  "img",
+  "kbd",
+  "li",
+  "ol",
+  "p",
+  "pre",
+  "span",
+  "strong",
+  "summary",
+  "table",
+  "tbody",
+  "td",
+  "th",
+  "thead",
+  "tr",
+  "ul",
+]);
 
 // Fenced code blocks and inline code spans are literal in MDX, so `<name>`
 // placeholders inside them must survive untouched; escaping them renders as
 // a visible `&lt;name&gt;` in the published page.
-const MARKDOWN_FENCE = /`{3,}[\s\S]*?`{3,}|~{3,}[\s\S]*?~{3,}/g
-const MARKDOWN_INLINE_CODE = /`[^`\n]*`/g
-const TABLE_ROW = /^\s*\|/
-const CODE_PLACEHOLDER = /\u0000MDX_CODE_(\d+)\u0000/g
+const MARKDOWN_FENCE = /`{3,}[\s\S]*?`{3,}|~{3,}[\s\S]*?~{3,}/g;
+const MARKDOWN_INLINE_CODE = /`[^`\n]*`/g;
+const TABLE_ROW = /^\s*\|/;
+const CODE_PLACEHOLDER = /\u0000MDX_CODE_(\d+)\u0000/g;
 
 // GFM splits table cells on `|` even inside backticks, so on such a row the
 // code-span boundaries the regex sees are not the ones the parser will use.
 // Leave those rows to the escaping pass rather than protect the wrong span.
 function inlineCodeIsReliable(line: string): boolean {
-  if (!TABLE_ROW.test(line)) return true
-  return !(line.match(MARKDOWN_INLINE_CODE) ?? []).some(span => span.includes('|'))
+  if (!TABLE_ROW.test(line)) return true;
+  return !(line.match(MARKDOWN_INLINE_CODE) ?? []).some(span =>
+    span.includes("|")
+  );
 }
 
 // Allowed URL schemes for href/src attribute values. Scheme-relative,
 // path-relative and fragment URLs (no scheme at all) are always allowed.
-const ALLOWED_URL_SCHEMES = new Set(['http', 'https', 'mailto'])
-const URL_ATTR = /(\s(?:href|src)\s*=\s*)("[^"]*"|'[^']*')/gi
-const URL_PLACEHOLDER = /\u0000MDX_URL_(\d+)\u0000/g
+const ALLOWED_URL_SCHEMES = new Set(["http", "https", "mailto"]);
+const URL_ATTR = /(\s(?:href|src)\s*=\s*)("[^"]*"|'[^']*')/gi;
+const URL_PLACEHOLDER = /\u0000MDX_URL_(\d+)\u0000/g;
 
 // Decide whether an href/src attribute value resolves to an allowed scheme.
 // The value is normalized first — numeric character references and named
@@ -115,23 +117,30 @@ const URL_PLACEHOLDER = /\u0000MDX_URL_(\d+)\u0000/g
 // obfuscated forms like `java\tscript:` or `&#106;avascript:` cannot slip an
 // executable scheme past the check.
 function urlAttrValueIsAllowed(raw: string): boolean {
-  let value = raw
+  let value = raw;
   try {
     value = value
-      .replace(/&#x([0-9a-f]+);?/gi, (_m, hex: string) => String.fromCodePoint(parseInt(hex, 16)))
-      .replace(/&#(\d+);?/g, (_m, dec: string) => String.fromCodePoint(Number(dec)))
+      .replace(/&#x([0-9a-f]+);?/gi, (_m, hex: string) =>
+        String.fromCodePoint(parseInt(hex, 16))
+      )
+      .replace(/&#(\d+);?/g, (_m, dec: string) =>
+        String.fromCodePoint(Number(dec))
+      );
   } catch {
-    return false // out-of-range character reference — treat as hostile
+    return false; // out-of-range character reference — treat as hostile
   }
   value = value
-    .replace(/&colon;/gi, ':')
-    .replace(/&tab;/gi, '\t')
-    .replace(/&newline;/gi, '\n')
+    .replace(/&colon;/gi, ":")
+    .replace(/&tab;/gi, "\t")
+    .replace(/&newline;/gi, "\n")
     // Strip characters browsers ignore when parsing a scheme
-    .replace(/[\u0000-\u0020\u00a0\u1680\u2000-\u200a\u2028\u2029\u205f\u3000]/g, '')
-  const scheme = /^([a-z][a-z0-9+.-]*):/i.exec(value)
-  if (!scheme) return true // relative, fragment or scheme-relative URL
-  return ALLOWED_URL_SCHEMES.has(scheme[1].toLowerCase())
+    .replace(
+      /[\u0000-\u0020\u00a0\u1680\u2000-\u200a\u2028\u2029\u205f\u3000]/g,
+      ""
+    );
+  const scheme = /^([a-z][a-z0-9+.-]*):/i.exec(value);
+  if (!scheme) return true; // relative, fragment or scheme-relative URL
+  return ALLOWED_URL_SCHEMES.has(scheme[1].toLowerCase());
 }
 
 // Rewrite href/src attributes whose value carries a disallowed scheme
@@ -139,35 +148,48 @@ function urlAttrValueIsAllowed(raw: string): boolean {
 // inline code spans are placeholder-protected so documentation examples
 // remain untouched.
 function neutralizeDangerousUrlAttributes(content: string): string {
-  const codeSpans: string[] = []
+  const codeSpans: string[] = [];
   const put = (match: string) => {
-    codeSpans.push(match)
-    return `\u0000MDX_URL_${codeSpans.length - 1}\u0000`
-  }
+    codeSpans.push(match);
+    return `\u0000MDX_URL_${codeSpans.length - 1}\u0000`;
+  };
   const withPlaceholders = content
     .replace(MARKDOWN_FENCE, put)
-    .split('\n')
-    .map(line => (inlineCodeIsReliable(line) ? line.replace(MARKDOWN_INLINE_CODE, put) : line))
-    .join('\n')
-  const rewritten = withPlaceholders.replace(URL_ATTR, (match, prefix: string, quoted: string) => {
-    const quote = quoted[0]
-    const value = quoted.slice(1, -1)
-    return urlAttrValueIsAllowed(value) ? match : `${prefix}${quote}#${quote}`
-  })
-  return rewritten.replace(URL_PLACEHOLDER, (_m, i) => codeSpans[Number(i)])
+    .split("\n")
+    .map(line =>
+      inlineCodeIsReliable(line)
+        ? line.replace(MARKDOWN_INLINE_CODE, put)
+        : line
+    )
+    .join("\n");
+  const rewritten = withPlaceholders.replace(
+    URL_ATTR,
+    (match, prefix: string, quoted: string) => {
+      const quote = quoted[0];
+      const value = quoted.slice(1, -1);
+      return urlAttrValueIsAllowed(value)
+        ? match
+        : `${prefix}${quote}#${quote}`;
+    }
+  );
+  return rewritten.replace(URL_PLACEHOLDER, (_m, i) => codeSpans[Number(i)]);
 }
 
 function escapeMdxAmbiguousAngles(content: string): string {
-  const codeSpans: string[] = []
+  const codeSpans: string[] = [];
   const put = (match: string) => {
-    codeSpans.push(match)
-    return `\u0000MDX_CODE_${codeSpans.length - 1}\u0000`
-  }
+    codeSpans.push(match);
+    return `\u0000MDX_CODE_${codeSpans.length - 1}\u0000`;
+  };
   const withPlaceholders = content
     .replace(MARKDOWN_FENCE, put)
-    .split('\n')
-    .map(line => (inlineCodeIsReliable(line) ? line.replace(MARKDOWN_INLINE_CODE, put) : line))
-    .join('\n')
+    .split("\n")
+    .map(line =>
+      inlineCodeIsReliable(line)
+        ? line.replace(MARKDOWN_INLINE_CODE, put)
+        : line
+    )
+    .join("\n");
   // The tag-name group is followed by an optional `\s[^<>]*` run so that
   // placeholders with embedded spaces or attribute-like text (e.g. the prose
   // `<branch tip>`) are recognized too — not just bare `<word>` forms. Without
@@ -175,11 +197,16 @@ function escapeMdxAmbiguousAngles(content: string): string {
   // it as an opening JSX element with a shorthand boolean attribute and fails
   // to compile when no matching closing tag follows.
   const escaped = withPlaceholders
-    .replace(/<((?:https?:\/\/|mailto:)[^>\s]+)>/g, '[$1]($1)')
-    .replace(/<\/?([A-Za-z][A-Za-z0-9_-]*)(?:\s[^<>]*)?>/g, (match, tagName: string) => {
-      return MDX_SAFE_TEXT_TAGS.has(tagName.toLowerCase()) ? match : escapeAngle(match)
-    })
-  return escaped.replace(CODE_PLACEHOLDER, (_m, i) => codeSpans[Number(i)])
+    .replace(/<((?:https?:\/\/|mailto:)[^>\s]+)>/g, "[$1]($1)")
+    .replace(
+      /<\/?([A-Za-z][A-Za-z0-9_-]*)(?:\s[^<>]*)?>/g,
+      (match, tagName: string) => {
+        return MDX_SAFE_TEXT_TAGS.has(tagName.toLowerCase())
+          ? match
+          : escapeAngle(match);
+      }
+    );
+  return escaped.replace(CODE_PLACEHOLDER, (_m, i) => codeSpans[Number(i)]);
 }
 
 /**
@@ -210,22 +237,25 @@ function escapeMdxAmbiguousAngles(content: string): string {
  * only the opening tag and leaving an orphaned </script> in the output.
  */
 function stripTagUntilClean(content: string, tagName: string): string {
-  const pairRe = new RegExp(`<${tagName}[^>]*>[\\s\\S]*?<\\/${tagName}[^>]*>`, 'gi')
-  const openerRe = new RegExp(`<${tagName}\\b[^>]*>`, 'gi')
-  const partialRe = new RegExp(`<${tagName}\\b[^>]*`, 'gi')
-
-  let prev = ''
+  const pairRe = new RegExp(
+    `<${tagName}[^>]*>[\\s\\S]*?<\\/${tagName}[^>]*>`,
+    "gi"
+  );
+  const openerRe = new RegExp(`<${tagName}\\b[^>]*>`, "gi");
+  const partialRe = new RegExp(`<${tagName}\\b[^>]*`, "gi");
+
+  let prev = "";
   while (content !== prev) {
-    prev = content
+    prev = content;
     // Pass 1: remove complete pairs until no more pairs exist
-    content = stripUntilStable(content, pairRe)
+    content = stripUntilStable(content, pairRe);
     // Pass 2: remove lone openers (those with no matching close tag remaining)
-    content = stripUntilStable(content, openerRe)
+    content = stripUntilStable(content, openerRe);
     // Pass 3: remove partial openers that never have a closing > at all
     // (e.g. <script type="tex — truncated at end of string)
-    content = stripUntilStable(content, partialRe)
+    content = stripUntilStable(content, partialRe);
   }
-  return content
+  return content;
 }
 
 /**
@@ -244,138 +274,147 @@ function stripTagUntilClean(content: string, tagName: string): string {
  * caught in subsequent iterations (guards nested-tag reintroduction).
  */
 function stripDangerousPatterns(content: string): string {
-  let prev = ''
+  let prev = "";
   while (content !== prev) {
-    prev = content
+    prev = content;
 
     // Remove <script> tags (complete pairs, then lone openers, then partials).
-    content = stripTagUntilClean(content, 'script')
+    content = stripTagUntilClean(content, "script");
 
     // Remove <style> tags (complete pairs, then lone openers).
-    content = stripTagUntilClean(content, 'style')
+    content = stripTagUntilClean(content, "style");
 
     // Remove <iframe> tags — included here so that iframe-spacer patterns like
     // <scri<iframe …>pt>…</script> are also caught in the same stability loop.
-    content = stripUntilStable(content, /<iframe[\s\S]*?<\/iframe>/gi)
-    content = stripUntilStable(content, /<iframe\b[^>]*\/?>/gi)
+    content = stripUntilStable(content, /<iframe[\s\S]*?<\/iframe>/gi);
+    content = stripUntilStable(content, /<iframe\b[^>]*\/?>/gi);
 
     // Remove inline event handlers.
     content = stripUntilStable(
       content,
-      /\s+on\w+(?:\s*=\s*(?:"[^"]*"|'[^']*'|[^\s>'"]+))?/gi,
-    )
+      /\s+on\w+(?:\s*=\s*(?:"[^"]*"|'[^']*'|[^\s>'"]+))?/gi
+    );
   }
-  return content
+  return content;
 }
 
 // Sanitize HTML for MDX compatibility
 export function sanitizeHtmlForMdx(content: string): string {
-  let sanitized = content
+  let sanitized = content;
 
   // Strip null bytes and control characters (except \t, \n, \r)
-  sanitized = sanitized.replace(/[\x00-\x08\x0B\x0C\x0E-\x1F\x7F]/gu, '')
+  sanitized = sanitized.replace(/[\x00-\x08\x0B\x0C\x0E-\x1F\x7F]/gu, "");
 
   // Convert contributors table to a grid of contributor cards
-  sanitized = sanitized.replace(/<table>[\s\S]*?<\/table>/gi, (tableMatch) => {
-    const contributors: Array<{ name: string; github: string; avatar: string; profileUrl: string }> = []
-    const tdRegex = /<td[^>]*>[\s\S]*?<a href="([^"]+)"[^>]*><img src="([^"]+)"[^>]*\/?><br\s*\/?><sub><b>([^<]+)<\/b><\/sub><\/a>[\s\S]*?<\/td>/gi
-
-    let tdMatch
+  sanitized = sanitized.replace(/<table>[\s\S]*?<\/table>/gi, tableMatch => {
+    const contributors: Array<{
+      name: string;
+      github: string;
+      avatar: string;
+      profileUrl: string;
+    }> = [];
+    const tdRegex =
+      /<td[^>]*>[\s\S]*?<a href="([^"]+)"[^>]*><img src="([^"]+)"[^>]*\/?><br\s*\/?><sub><b>([^<]+)<\/b><\/sub><\/a>[\s\S]*?<\/td>/gi;
+
+    let tdMatch;
     while ((tdMatch = tdRegex.exec(tableMatch)) !== null) {
-      const profileUrl = tdMatch[1]
-      const avatar = tdMatch[2]
-      const name = tdMatch[3]
-      const githubMatch = profileUrl.match(/github\.com\/([^/]+)/)
-      const github = githubMatch ? githubMatch[1] : ''
+      const profileUrl = tdMatch[1];
+      const avatar = tdMatch[2];
+      const name = tdMatch[3];
+      const githubMatch = profileUrl.match(/github\.com\/([^/]+)/);
+      const github = githubMatch ? githubMatch[1] : "";
 
       // No `name && avatar` guard here: every capture group in tdRegex is
       // `+`-quantified (`[^"]+` for href and src, `[^<]+` for the name), so a cell
       // with an empty href, src or name fails to match and never reaches this line.
       // A guard would be unreachable, and coverage would flag it as such.
-      contributors.push({ name, github, avatar, profileUrl })
+      contributors.push({ name, github, avatar, profileUrl });
     }
 
-    if (contributors.length === 0) return ''
+    if (contributors.length === 0) return "";
 
-    const cards = contributors.map(c =>
-      `<a href="${escapeAngle(c.profileUrl)}" className="contributor-card" target="_blank" rel="noopener noreferrer">
+    const cards = contributors
+      .map(
+        c =>
+          `<a href="${escapeAngle(c.profileUrl)}" className="contributor-card" target="_blank" rel="noopener noreferrer">
         <img src="${escapeAngle(c.avatar)}" alt="${escapeAngle(c.name)}" />
         <span>${escapeAngle(c.name)}</span>
       </a>`
-    ).join('\n')
+      )
+      .join("\n");
 
-    return `<div className="contributors-grid">\n${cards}\n</div>`
-  })
+    return `<div className="contributors-grid">\n${cards}\n</div>`;
+  });
 
   // Remove leftover tr/td that aren't part of tables we converted
-  sanitized = sanitized.replace(/<tr>[\s\S]*?<\/tr>/gi, '')
-  sanitized = sanitized.replace(/<td[^>]*>[\s\S]*?<\/td>/gi, '')
+  sanitized = sanitized.replace(/<tr>[\s\S]*?<\/tr>/gi, "");
+  sanitized = sanitized.replace(/<td[^>]*>[\s\S]*?<\/td>/gi, "");
 
   // Remove all iframe tags — handles closed, self-closing, and unclosed <iframe> forms.
   // Use stripUntilStable for both patterns to prevent multi-character bypass via
   // nested/interleaved input (e.g. <i<iframe>frame ...) — CWE-116.
   // Iframe removal is included in the stripDangerousPatterns loop below so that
   // iframe-spacer patterns like <scri<iframe …>pt>…</script> are also caught.
-  sanitized = stripUntilStable(sanitized, /<iframe[\s\S]*?<\/iframe>/gi)
-  sanitized = stripUntilStable(sanitized, /<iframe\b[^>]*\/?>/gi)
+  sanitized = stripUntilStable(sanitized, /<iframe[\s\S]*?<\/iframe>/gi);
+  sanitized = stripUntilStable(sanitized, /<iframe\b[^>]*\/?>/gi);
 
   // Normalize all img tags - handle both <img ...> and <img ... />
   sanitized = sanitized.replace(/<img\s+([^>]*?)\/?>/gi, (match, attrs) => {
-    const srcMatch = attrs.match(/src=["']([^"']+)["']/i)
-    const altMatch = attrs.match(/alt=["']([^"']*)["']/i)
-    const titleMatch = attrs.match(/title=["']([^"']*)["']/i)
+    const srcMatch = attrs.match(/src=["']([^"']+)["']/i);
+    const altMatch = attrs.match(/alt=["']([^"']*)["']/i);
+    const titleMatch = attrs.match(/title=["']([^"']*)["']/i);
 
-    const src = srcMatch ? srcMatch[1] : ''
-    if (!src) return ''
-    const alt = altMatch ? altMatch[1] : ''
+    const src = srcMatch ? srcMatch[1] : "";
+    if (!src) return "";
+    const alt = altMatch ? altMatch[1] : "";
 
-    return `<img src="${escapeAngle(src)}" alt="${escapeAngle(alt)}"${titleMatch ? ` title="${escapeAngle(titleMatch[1])}"` : ''} />`
-  })
+    return `<img src="${escapeAngle(src)}" alt="${escapeAngle(alt)}"${titleMatch ? ` title="${escapeAngle(titleMatch[1])}"` : ""} />`;
+  });
 
   // Fix self-closing tags
-  sanitized = sanitized.replace(/<br\s*\/?>/gi, '<br />')
-  sanitized = sanitized.replace(/<hr\s*\/?>/gi, '<hr />')
+  sanitized = sanitized.replace(/<br\s*\/?>/gi, "<br />");
+  sanitized = sanitized.replace(/<hr\s*\/?>/gi, "<hr />");
 
   // Remove other problematic attributes from remaining tags
-  sanitized = sanitized.replace(/\s+align=["']?[^"'\s>]+["']?/gi, '')
-  sanitized = sanitized.replace(/\s+width=["']?[^"'\s>]+["']?/gi, '')
-  sanitized = sanitized.replace(/\s+height=["']?[^"'\s>]+["']?/gi, '')
-  sanitized = sanitized.replace(/\s+frameborder=["']?[^"'\s>]+["']?/gi, '')
-  sanitized = sanitized.replace(/\s+allowfullscreen(?:=["'][^"']*["'])?/gi, '')
-  sanitized = sanitized.replace(/\s+scrolling=["']?[^"'\s>]+["']?/gi, '')
-  sanitized = sanitized.replace(/\sclass=/gi, ' className=')
+  sanitized = sanitized.replace(/\s+align=["']?[^"'\s>]+["']?/gi, "");
+  sanitized = sanitized.replace(/\s+width=["']?[^"'\s>]+["']?/gi, "");
+  sanitized = sanitized.replace(/\s+height=["']?[^"'\s>]+["']?/gi, "");
+  sanitized = sanitized.replace(/\s+frameborder=["']?[^"'\s>]+["']?/gi, "");
+  sanitized = sanitized.replace(/\s+allowfullscreen(?:=["'][^"']*["'])?/gi, "");
+  sanitized = sanitized.replace(/\s+scrolling=["']?[^"'\s>]+["']?/gi, "");
+  sanitized = sanitized.replace(/\sclass=/gi, " className=");
 
   // Remove style attributes that might cause issues
-  sanitized = sanitized.replace(/\s+style=["'][^"']*["']/gi, '')
+  sanitized = sanitized.replace(/\s+style=["'][^"']*["']/gi, "");
 
   // Strip all security-critical patterns (script, style tags, event handlers)
   // in a unified stability loop.  This prevents "spacer" exploits where one
   // removal reconstructs a pattern that an earlier removal already finished
   // processing (e.g. iframe or script fragments reassembling dangerous tags).
-  sanitized = stripDangerousPatterns(sanitized)
+  sanitized = stripDangerousPatterns(sanitized);
 
   // Rewrite href/src attributes with disallowed URL schemes to inert fragments
-  sanitized = neutralizeDangerousUrlAttributes(sanitized)
+  sanitized = neutralizeDangerousUrlAttributes(sanitized);
 
   // Remove <meta>, <link>, <base> tags
-  sanitized = sanitized.replace(/<meta\b[^>]*\/?>/gi, '')
-  sanitized = sanitized.replace(/<link\b[^>]*\/?>/gi, '')
-  sanitized = sanitized.replace(/<base\b[^>]*\/?>/gi, '')
+  sanitized = sanitized.replace(/<meta\b[^>]*\/?>/gi, "");
+  sanitized = sanitized.replace(/<link\b[^>]*\/?>/gi, "");
+  sanitized = sanitized.replace(/<base\b[^>]*\/?>/gi, "");
 
   // Remove CDATA sections
-  sanitized = sanitized.replace(/<!\[CDATA\[[\s\S]*?\]\]>/g, '')
+  sanitized = sanitized.replace(/<!\[CDATA\[[\s\S]*?\]\]>/g, "");
 
   // Remove processing instructions
-  sanitized = sanitized.replace(/<\?[\s\S]*?\?>/g, '')
+  sanitized = sanitized.replace(/<\?[\s\S]*?\?>/g, "");
 
   // Remove DOCTYPE declarations
-  sanitized = sanitized.replace(/<!DOCTYPE[^>]*>/gi, '')
+  sanitized = sanitized.replace(/<!DOCTYPE[^>]*>/gi, "");
 
   // Remove <sub> and other problematic inline tags that may have issues
-  sanitized = sanitized.replace(/<sub>/gi, '')
-  sanitized = sanitized.replace(/<\/sub>/gi, '')
+  sanitized = sanitized.replace(/<sub>/gi, "");
+  sanitized = sanitized.replace(/<\/sub>/gi, "");
 
-  sanitized = escapeMdxAmbiguousAngles(sanitized)
+  sanitized = escapeMdxAmbiguousAngles(sanitized);
 
-  return sanitized
+  return sanitized;
 }
diff --git a/src/lib/transformMdx.ts b/src/lib/transformMdx.ts
index f84e6ef..70f2eb8 100644
--- a/src/lib/transformMdx.ts
+++ b/src/lib/transformMdx.ts
@@ -39,9 +39,8 @@ export function convertHtmlScriptsToJsxComments(input: string): string {
 
   // Convert HTML comments to JSX comments and protect them from the
   // curly-brace entity-encoding step at the bottom of this function.
-  s = s.replace(
-    /<!--([\s\S]*?)-->/g,
-    (_m, comment) => put(`{/*${comment.trim()}*/}`)
+  s = s.replace(/<!--([\s\S]*?)-->/g, (_m, comment) =>
+    put(`{/*${comment.trim()}*/}`)
   );
 
   // Loop until stable to prevent nested-tag bypass (CWE-116 / CodeQL #106-#108).
@@ -76,10 +75,7 @@ export function convertHtmlScriptsToJsxComments(input: string): string {
   // Strip HTML event-handler attributes (onclick, onload, etc.).
   // Require `=` after the attribute name so normal prose words like
   // "onto", "once", "one", "only" are NOT removed.
-  s = stripLoop(
-    s,
-    /\s+on[a-z]+\s*=\s*(?:"[^"]*"|'[^']*'|\{[^}]*\}|[^\s>]+)/gi
-  );
+  s = stripLoop(s, /\s+on[a-z]+\s*=\s*(?:"[^"]*"|'[^']*'|\{[^}]*\}|[^\s>]+)/gi);
 
   s = s.replace(
     /\b(href|src)=(?!["'{])([^\s>]+)/gi,
diff --git a/src/lib/url.ts b/src/lib/url.ts
index 0f71b31..1b9b9f2 100644
--- a/src/lib/url.ts
+++ b/src/lib/url.ts
@@ -3,7 +3,7 @@
  * NEXT_PUBLIC_BRANCH=${BRANCH:-main} build command in netlify.toml.
  * Falls back to 'main' for local development or any build that doesn't set the var.
  */
-export const CURRENT_BRANCH = process.env.NEXT_PUBLIC_BRANCH || 'main';
+export const CURRENT_BRANCH = process.env.NEXT_PUBLIC_BRANCH || "main";
 
 /**
  * Get the base URL for the application.
diff --git a/src/proxy.ts b/src/proxy.ts
index 00437f1..f3a8a6a 100644
--- a/src/proxy.ts
+++ b/src/proxy.ts
@@ -12,11 +12,16 @@ const intlMiddleware = createMiddleware({
 export function proxy(request: NextRequest) {
   // Redirect localized docs URLs to non-localized version
   // e.g., /es/docs/... -> /docs/...
-  const docsPathMatch = request.nextUrl.pathname.match(/^\/([a-z]{2}(?:-[A-Z]{2})?|SC)\/docs(?:\/|$)/);
+  const docsPathMatch = request.nextUrl.pathname.match(
+    /^\/([a-z]{2}(?:-[A-Z]{2})?|SC)\/docs(?:\/|$)/
+  );
   if (docsPathMatch) {
     const url = request.nextUrl.clone();
     // Remove the locale prefix from the pathname
-    url.pathname = url.pathname.replace(/^\/(?:[a-z]{2}(?:-[A-Z]{2})?|SC)\/docs(?=\/|$)/, '/docs');
+    url.pathname = url.pathname.replace(
+      /^\/(?:[a-z]{2}(?:-[A-Z]{2})?|SC)\/docs(?=\/|$)/,
+      "/docs"
+    );
     return NextResponse.redirect(url, 307);
   }
 
@@ -32,8 +37,5 @@ export function proxy(request: NextRequest) {
 }
 
 export const config = {
-  matcher: [
-    "/((?!docs|api|_next|_vercel|code|.*\\..*).*)",
-    "/",
-  ],
+  matcher: ["/((?!docs|api|_next|_vercel|code|.*\\..*).*)", "/"],
 };
diff --git a/tsconfig.json b/tsconfig.json
index e16eaa9..a1bc825 100644
--- a/tsconfig.json
+++ b/tsconfig.json
@@ -1,11 +1,7 @@
 {
   "compilerOptions": {
     "target": "ES2017",
-    "lib": [
-      "dom",
-      "dom.iterable",
-      "esnext"
-    ],
+    "lib": ["dom", "dom.iterable", "esnext"],
     "allowJs": true,
     "skipLibCheck": true,
     "strict": true,
@@ -23,9 +19,7 @@
       }
     ],
     "paths": {
-      "@/*": [
-        "./src/*"
-      ]
+      "@/*": ["./src/*"]
     }
   },
   "include": [
@@ -35,8 +29,5 @@
     ".next/types/**/*.ts",
     ".next/dev/types/**/*.ts"
   ],
-  "exclude": [
-    "node_modules",
-    "src/__tests__"
-  ]
+  "exclude": ["node_modules", "src/__tests__"]
 }
diff --git a/vitest.config.ts b/vitest.config.ts
index d6d8d14..45a2fcb 100644
--- a/vitest.config.ts
+++ b/vitest.config.ts
@@ -1,6 +1,6 @@
-import { defineConfig } from 'vitest/config'
-import { transformWithEsbuild } from 'vite'
-import path from 'path'
+import { defineConfig } from "vitest/config";
+import { transformWithEsbuild } from "vite";
+import path from "path";
 
 export default defineConfig({
   plugins: [
@@ -9,24 +9,31 @@ export default defineConfig({
       // SWC, but vitest's esbuild pipeline only parses JSX in .jsx/.tsx files,
       // so tests that import the docs page (which imports mdx-components.js)
       // need this file transformed with the JSX loader.
-      name: 'treat-mdx-components-js-as-jsx',
+      name: "treat-mdx-components-js-as-jsx",
       async transform(code, id) {
-        if (!id.endsWith('mdx-components.js')) return null
-        return transformWithEsbuild(code, id, { loader: 'jsx', jsx: 'automatic' })
+        if (!id.endsWith("mdx-components.js")) return null;
+        return transformWithEsbuild(code, id, {
+          loader: "jsx",
+          jsx: "automatic",
+        });
       },
     },
   ],
   test: {
     globals: true,
-    environment: 'node',
+    environment: "node",
     coverage: {
-      provider: 'v8',
-      reporter: ['text', 'lcov'],
+      provider: "v8",
+      reporter: ["text", "lcov"],
       // scripts/ (prebuild sync + link checks) and netlify/ (NPS relay) ship
       // alongside src/ and have their own suites; keep them inside the gate so
       // a regression there cannot pass unnoticed.
-      include: ['src/**/*.{ts,tsx}', 'scripts/**/*.ts', 'netlify/**/*.{ts,mts}'],
-      exclude: ['**/*.test.ts', '**/*.test.tsx', '**/*.d.ts'],
+      include: [
+        "src/**/*.{ts,tsx}",
+        "scripts/**/*.ts",
+        "netlify/**/*.{ts,mts}",
+      ],
+      exclude: ["**/*.test.ts", "**/*.test.tsx", "**/*.d.ts"],
       // Ratchet: raise these as coverage grows; never lower without a reason
       // in the PR. Measured at the last ratchet: 87.9 / 87.8 / 81.8 / 87.0.
       thresholds: {
@@ -39,7 +46,7 @@ export default defineConfig({
   },
   resolve: {
     alias: {
-      '@': path.resolve(__dirname, './src'),
+      "@": path.resolve(__dirname, "./src"),
     },
   },
-})
+});

From af5a9b17adb9a95815718919db4c8bc2e55917c5 Mon Sep 17 00:00:00 2001
From: scanner <scanner@hive.kubestellar.io>
Date: Mon, 5 Oct 2026 23:35:59 -0400
Subject: [PATCH 3/5] ci: enforce prettier via format:check in typecheck
 workflow

Signed-off-by: scanner <scanner@hive.kubestellar.io>
---
 .github/workflows/typecheck.yml                    | 9 +++++++++
 CONTRIBUTING.md                                    | 1 +
 changelog.d/changed-enforce-prettier-ci.md         | 1 +
 src/__tests__/search-route.non-error-throw.test.ts | 4 +---
 4 files changed, 12 insertions(+), 3 deletions(-)
 create mode 100644 changelog.d/changed-enforce-prettier-ci.md

diff --git a/.github/workflows/typecheck.yml b/.github/workflows/typecheck.yml
index c8789ad..5e983c4 100644
--- a/.github/workflows/typecheck.yml
+++ b/.github/workflows/typecheck.yml
@@ -14,6 +14,9 @@ on:
       - ".eslintrc*"
       - "eslint.config.*"
       - "next.config.*"
+      - ".prettierrc.json"
+      - ".prettierignore"
+      - "vitest.config.ts"
   push:
     branches: [main]
     paths:
@@ -27,6 +30,9 @@ on:
       - ".eslintrc*"
       - "eslint.config.*"
       - "next.config.*"
+      - ".prettierrc.json"
+      - ".prettierignore"
+      - "vitest.config.ts"
 
 permissions: read-all # default read; writes scoped to job below
 
@@ -56,3 +62,6 @@ jobs:
 
       - name: ESLint
         run: npm run lint
+
+      - name: Prettier
+        run: npm run format:check
diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
index b9d3ad3..2bbb97a 100644
--- a/CONTRIBUTING.md
+++ b/CONTRIBUTING.md
@@ -24,6 +24,7 @@ npm test              # Vitest unit tests
 npx vitest run --coverage   # what CI runs: tests plus the coverage gate
 npm run check-links   # internal docs links
 npm run lint          # ESLint for src/, scripts/ and netlify/
+npm run format        # Prettier; CI runs format:check, so run this before pushing
 npm run build         # production build and doc-sync scripts
 ```
 
diff --git a/changelog.d/changed-enforce-prettier-ci.md b/changelog.d/changed-enforce-prettier-ci.md
new file mode 100644
index 0000000..3b38139
--- /dev/null
+++ b/changelog.d/changed-enforce-prettier-ci.md
@@ -0,0 +1 @@
+- Enforce Prettier in CI by running `npm run format:check` in the TypeScript & Lint workflow, after a one-time repository reformat.
diff --git a/src/__tests__/search-route.non-error-throw.test.ts b/src/__tests__/search-route.non-error-throw.test.ts
index 8a2bb9c..b111d26 100644
--- a/src/__tests__/search-route.non-error-throw.test.ts
+++ b/src/__tests__/search-route.non-error-throw.test.ts
@@ -72,9 +72,7 @@ vi.mock("@/lib/metrics", () => ({
   recordApiRequest: () => {},
 }));
 
-let GET: (
-  request: unknown
-) => Promise<{
+let GET: (request: unknown) => Promise<{
   status: number;
   body: { error: string; results: unknown[]; count: number };
 }>;

From 20cdadef149dd69d5feb4a3d96ec9d3fc203cba8 Mon Sep 17 00:00:00 2001
From: scanner <scanner@hive.kubestellar.io>
Date: Mon, 5 Oct 2026 23:48:53 -0400
Subject: [PATCH 4/5] build(deps): bump source-map-js to 1.2.2 to clear
 GHSA-68fv-2mgg-jv7q

The production dependency audit gate started failing after this advisory
was published; 1.2.2 is the patched release.

Signed-off-by: scanner <scanner@hive.kubestellar.io>
---
 package-lock.json | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 9759356..113f1f2 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -14355,9 +14355,9 @@
       }
     },
     "node_modules/source-map-js": {
-      "version": "1.2.1",
-      "resolved": "https://registry.npmjs.org/source-map-js/-/source-map-js-1.2.1.tgz",
-      "integrity": "sha512-UXWMKhLOwVKb728IUtQPXxfYU+usdybtUrK/8uGE8CQMvrhOpwvzDBwj0QhSL7MQc7vIsISBG8VQ8+IDQxpfQA==",
+      "version": "1.2.2",
+      "resolved": "https://registry.npmjs.org/source-map-js/-/source-map-js-1.2.2.tgz",
+      "integrity": "sha512-KGj/8Y43x35aZVDtt+J4mK1hoLGHULMYfSkODJNQjNDC3oW1PqPoxMwo0pLUsWM/UEGzON/NxeHywEfNXNP3Vw==",
       "license": "BSD-3-Clause",
       "engines": {
         "node": ">=0.10.0"

From 9b9d5345742052f79720aab7c923dbbfcd0d4ed5 Mon Sep 17 00:00:00 2001
From: scanner <scanner@hive.kubestellar.io>
Date: Mon, 5 Oct 2026 23:49:10 -0400
Subject: [PATCH 5/5] test(nps-relay): match prettier double-quoted route
 literals in nps.mts

The route-path assertion looked for single-quoted literals, which the
prettier pass rewrote to double quotes.

Signed-off-by: scanner <scanner@hive.kubestellar.io>
---
 netlify/nps-relay/relay.test.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/netlify/nps-relay/relay.test.ts b/netlify/nps-relay/relay.test.ts
index 1fb965f..9a7dc7b 100644
--- a/netlify/nps-relay/relay.test.ts
+++ b/netlify/nps-relay/relay.test.ts
@@ -982,7 +982,7 @@ describe("Netlify function wiring", () => {
       "utf8"
     );
     for (const p of [RELAY_BASE_PATH, REGISTER_PATH, PENDING_PATH, ACK_PATH]) {
-      expect(fn).toContain(`'${p}'`);
+      expect(fn).toContain(`"${p}"`);
     }
     expect(fn).toContain("handleRelayRequest");
     expect(fn).toContain("HUB_SECRET_HASH_ENV");