Skip to content

negotiate markdown with @affordances/md - #196

Draft
ejkorol wants to merge 1 commit into
mainfrom
ejkorol/affordances-md
Draft

ejkorol wants to merge 1 commit into
mainfrom
ejkorol/affordances-md

Conversation

@ejkorol

@ejkorol ejkorol commented Nov 10, 2026

Copy link
Copy Markdown
Member
  • withMd replaces the hand-rolled rewrites, Vary headers and llms.mdx route; init's one-line md route converts each page's HTML (default maxBytes holds the All-time report).
  • Each report figure is an AgentSlot filled by the same lib/markdown builders MCP and the API use (figureMarkdown, runMarkdown, referenceMarkdown); reportMarkdown composes them unchanged.
  • Twins are CDN-cacheable: publicCache (TWIN_CACHE, s-maxage=3600, stale-while-revalidate=3600) on the report, Methodology and About routes; negotiated requests 307 to the .md.
  • 404s: an unknown section is notFoundMarkdown; extra segments and unknown scenarios (the page answers 200 / redirects) stay in the default export.
  • llms.txt and llms-full.txt are the library handlers, fed object links and reportMarkdown pages (no rendering); Methodology stays written.
  • Tests: twins.test.ts (slots, defaults, 404s), twins.e2e.mjs (against next start).

- withMd replaces the hand-rolled rewrites, Vary headers and llms.mdx route;
  init's one-line md route converts each page's HTML (default maxBytes holds
  the All-time report).
- Each report figure is an AgentSlot filled by the same lib/markdown builders
  MCP and the API use (figureMarkdown, runMarkdown, referenceMarkdown);
  reportMarkdown composes them unchanged.
- Twins are CDN-cacheable: publicCache (TWIN_CACHE, s-maxage=3600,
  stale-while-revalidate=3600) on the report, Methodology and About routes;
  negotiated requests 307 to the .md.
- 404s: an unknown section is notFoundMarkdown; extra segments and unknown
  scenarios (the page answers 200 / redirects) stay in the default export.
- llms.txt and llms-full.txt are the library handlers, fed object links and
  reportMarkdown pages (no rendering); Methodology stays written.
- Tests: twins.test.ts (slots, defaults, 404s), twins.e2e.mjs (against next start).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@vercel

vercel Bot commented Nov 10, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
benchmarks Ready Ready Preview Nov 10, 2026 9:19pm UTC

Request Review

@coderabbitai

coderabbitai Bot commented Nov 10, 2026

Copy link
Copy Markdown

Important

Draft PR not reviewed

Draft PRs are not automatically reviewed by default.

  • Trigger a manual review

To automatically review draft PRs, update your CodeRabbit configuration:

reviews:
  auto_review:
    drafts: true
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Added@​affordances/​md@​0.5.0791009992100

View full report

@socket-security

Copy link
Copy Markdown

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Priority Alert  (click "▶" to expand/collapse) Action
Low priority
Low adoption: npm @affordances/md

Location: Package overview

From: apps/www/package.json → npm/@affordances/md@0.5.0

ℹ Read more on: This package | This alert | What are unpopular packages?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Unpopular packages may have less maintenance and contain other problems.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@affordances/md@0.5.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn
Low priority
Publisher changed: npm parse5 is now published by fb55

Author: fb55

From: ? → npm/parse5@8.1.1

ℹ Read more on: This package | This alert | What is unstable ownership?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Try to reduce the number of authors you depend on to reduce the risk to malicious actors gaining access to your supply chain. Packages should remove inactive collaborators with publishing rights from packages on npm.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/parse5@8.1.1. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn

View full report

This branch was previously deployed

1 inactive deployment
Benchmark — 40b1eac7 Deployed Nov 10, 2026 by ejkorol via Run Benchmarks (svelte, registry-lockfile) #1406
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant