From ab15644c71d0c087cb45718b6f5ebc007991c58f Mon Sep 17 00:00:00 2001
From: Will Manning <will@willmanning.io>
Date: Wed, 4 Nov 2026 02:00:45 -0500
Subject: [PATCH 1/9] Set ten Biome rules to error, and fix what they find

Set noExplicitAny, noArrayIndexKey, noAssignInExpressions,
noShadowRestrictedNames, useImportType, noParameterAssign,
useExhaustiveDependencies, noForEach, noUselessFragments, and
noDangerouslySetInnerHtml to error for both sites. Fix the eight findings
in code, and mark the nine deliberate uses with a biome-ignore comment
that gives the reason. CLAUDE.md lists the four rules that stay off, with
the findings each would raise.

Signed-off-by: Will Manning <will@willmanning.io>
---
 CLAUDE.md                                     | 10 +++-
 biome.json                                    | 23 ++++---
 scripts/verify.ts                             |  6 +-
 src/app/(bench)/bench/layout.tsx              |  1 +
 src/app/(bench)/bench/page.tsx                |  1 +
 src/app/(site)/blog/[slug]/page.tsx           |  1 +
 src/app/(site)/layout.tsx                     |  1 +
 src/app/(site)/page.tsx                       |  1 +
 .../components/Chart.empty-window.test.tsx    |  7 +--
 .../components/Chart.lazy-hydration.test.tsx  | 18 +++---
 src/bench/components/GroupPermalink.test.tsx  |  2 +-
 src/bench/components/OpenGroupsScript.tsx     |  2 +
 src/bench/styles/tokens.test.ts               | 60 +++++++++----------
 src/components/install-tabs/index.tsx         |  1 +
 src/components/logo-banner/index.tsx          |  1 +
 15 files changed, 70 insertions(+), 65 deletions(-)

diff --git a/CLAUDE.md b/CLAUDE.md
index 34d3b655..e21f89a2 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -111,12 +111,18 @@ To see bench as bench.vortex.dev serves it, send its host: `curl -H 'Host: bench
 
 bench uses Biome, not ESLint or Prettier. The bench override in the root `biome.json` keeps the style bench had under Prettier (single quotes, trailing commas, 100 columns, 2-space indent) for bench's files, and `bun run check:ci` checks bench along with the site. `biome.json` cannot hold comments, so the reasons for each difference from the site's rules are here:
 
-- `correctness/useExhaustiveDependencies` is on (the site has it off). It replaces ESLint's `react-hooks/exhaustive-deps`. An effect that omits dependencies on purpose carries a `biome-ignore` comment that says why.
 - The site's `a11y` rules apply to bench unchanged. Seven places in existing markup break one of them on purpose, and each carries an inline `biome-ignore` comment that says why: `useAriaPropsSupportedByRole` for `aria-label` on a plain `div` (the header nav controls, the chart toolbar), `useSemanticElements` for `role="group"` on a `div` in the toolbars (a `fieldset` would change their layout), `useFocusableInteractive` for the pointer-driven range strip, and `noNoninteractiveTabindex` for the group info icon, which takes focus so its tooltip shows for keyboard users. New markup follows the rules, or carries its own `biome-ignore` with a reason.
 - `complexity/noImportantStyles` is off: `!important` overrides Chart.js's inline canvas size and the offscreen prebuild layout in `src/bench/styles/globals.css`.
 - `organizeImports` is off: Prettier never sorted bench's imports, and reordering them would rewrite 27 files and could change the order CSS loads in.
 
-Next.js's `core-web-vitals` lint rules have no Biome equivalent; the site accepts that too. The site's config also turns off `suspicious/noExplicitAny`, so bench's old typescript-eslint `no-explicit-any` check is gone too.
+Next.js's `core-web-vitals` lint rules have no Biome equivalent; the site accepts that too. Two rules replace bench's old ESLint checks for both sites: `correctness/useExhaustiveDependencies` replaces `react-hooks/exhaustive-deps`, and `suspicious/noExplicitAny` replaces typescript-eslint's `no-explicit-any`. An effect that omits dependencies on purpose carries a `biome-ignore` comment that says why.
+
+Both sites run Biome's recommended rules, with the rules in `biome.json` set to `error` so that `check:ci` fails on them (Biome's default for some is a warning, which does not fail it). Each deliberate exception carries a `biome-ignore` comment with its reason: the inline scripts and JSON-LD (`noDangerouslySetInnerHtml`; `jsonLdScript` escapes `<`), and the two lists whose index is the only key (`noArrayIndexKey`). Four rules stay off. The count is what each would raise on 2026-11-04:
+
+- `style/noNonNullAssertion` (192, 190 of them in bench, mostly tests). Turn it on file by file, as bench's code changes.
+- `style/noDescendingSpecificity` (13, 12 in `src/bench/styles/globals.css`). Fixing it reorders CSS rules, which can change what wins the cascade, so it needs a visual check of each page.
+- `performance/noImgElement` (5). The logos and marks are SVGs and small PNGs with fixed sizes, which `next/image` would not make smaller.
+- `complexity/noImportantStyles`, for bench only (3; see above).
 
 ## Licensing
 
diff --git a/biome.json b/biome.json
index 0555bce4..7a6380f8 100644
--- a/biome.json
+++ b/biome.json
@@ -57,15 +57,15 @@
     "rules": {
       "preset": "recommended",
       "suspicious": {
-        "noExplicitAny": "off",
-        "noArrayIndexKey": "off",
-        "noAssignInExpressions": "off",
-        "noShadowRestrictedNames": "off"
+        "noExplicitAny": "error",
+        "noArrayIndexKey": "error",
+        "noAssignInExpressions": "error",
+        "noShadowRestrictedNames": "error"
       },
       "style": {
-        "useImportType": "warn",
+        "useImportType": "error",
         "noNonNullAssertion": "off",
-        "noParameterAssign": "off",
+        "noParameterAssign": "error",
         "noDescendingSpecificity": "off"
       },
       "correctness": {
@@ -76,7 +76,7 @@
           }
         },
         "noUnusedImports": "error",
-        "useExhaustiveDependencies": "off",
+        "useExhaustiveDependencies": "error",
         "useHookAtTopLevel": "error"
       },
       "a11y": {
@@ -86,14 +86,14 @@
         "noSvgWithoutTitle": "error"
       },
       "complexity": {
-        "noForEach": "off",
-        "noUselessFragments": "off"
+        "noForEach": "error",
+        "noUselessFragments": "error"
       },
       "performance": {
         "noImgElement": "off"
       },
       "security": {
-        "noDangerouslySetInnerHtml": "off"
+        "noDangerouslySetInnerHtml": "error"
       }
     }
   },
@@ -125,9 +125,6 @@
       },
       "linter": {
         "rules": {
-          "correctness": {
-            "useExhaustiveDependencies": "error"
-          },
           "complexity": {
             "noImportantStyles": "off"
           }
diff --git a/scripts/verify.ts b/scripts/verify.ts
index 8535ff91..5b998376 100644
--- a/scripts/verify.ts
+++ b/scripts/verify.ts
@@ -120,8 +120,7 @@ function jsonLd(html: string): JsonLdResult {
   const blocks: Array<Record<string, unknown>> = [];
   const re =
     /<script[^>]+type="application\/ld\+json"[^>]*>([\s\S]*?)<\/script>/gi;
-  let m: RegExpExecArray | null;
-  while ((m = re.exec(html)) !== null) {
+  for (const m of html.matchAll(re)) {
     const raw = m[1] ?? "";
     try {
       blocks.push(JSON.parse(raw));
@@ -135,8 +134,7 @@ function jsonLd(html: string): JsonLdResult {
 function internalHrefs(html: string): string[] {
   const hrefs = new Set<string>();
   const re = /<a[^>]+href="(\/[^"#]*)(?:#[^"]*)?"/gi;
-  let m: RegExpExecArray | null;
-  while ((m = re.exec(html)) !== null) {
+  for (const m of html.matchAll(re)) {
     const href = m[1];
     if (!href) continue;
     if (href.startsWith("//")) continue;
diff --git a/src/app/(bench)/bench/layout.tsx b/src/app/(bench)/bench/layout.tsx
index 3bcbdbf5..12b5b85e 100644
--- a/src/app/(bench)/bench/layout.tsx
+++ b/src/app/(bench)/bench/layout.tsx
@@ -85,6 +85,7 @@ export default async function RootLayout({ children }: { children: ReactNode })
       suppressHydrationWarning
     >
       <head>
+        {/* biome-ignore lint/security/noDangerouslySetInnerHtml: a constant script that sets the theme before first paint. */}
         <script dangerouslySetInnerHTML={{ __html: THEME_BOOTSTRAP }} />
       </head>
       <body>
diff --git a/src/app/(bench)/bench/page.tsx b/src/app/(bench)/bench/page.tsx
index 4842479b..4708af7f 100644
--- a/src/app/(bench)/bench/page.tsx
+++ b/src/app/(bench)/bench/page.tsx
@@ -140,6 +140,7 @@ function HomeContent({ data: [params, groups, universe] }: { data: LandingData }
             {/* The results as a schema.org Dataset, for search engines. */}
             <script
               type="application/ld+json"
+              // biome-ignore lint/security/noDangerouslySetInnerHtml: JSON-LD from our own data; jsonLdScript escapes every <.
               dangerouslySetInnerHTML={{ __html: jsonLdScript(datasetJsonLd(groups)) }}
             />
             {/* Shown only with JavaScript off, above the groups. */}
diff --git a/src/app/(site)/blog/[slug]/page.tsx b/src/app/(site)/blog/[slug]/page.tsx
index 16d5bdc4..1b8f1608 100644
--- a/src/app/(site)/blog/[slug]/page.tsx
+++ b/src/app/(site)/blog/[slug]/page.tsx
@@ -91,6 +91,7 @@ export default async function BlogPostPage({ params }: BlogPostPageProps) {
     <div className="blog-page">
       <script
         type="application/ld+json"
+        // biome-ignore lint/security/noDangerouslySetInnerHtml: JSON-LD from our own data; jsonLdScript escapes every <.
         dangerouslySetInnerHTML={{ __html: jsonLdScript(articleSchema) }}
       />
       <NextLink href="/blog" className="vx-label vx-nav-link blog-back">
diff --git a/src/app/(site)/layout.tsx b/src/app/(site)/layout.tsx
index b0738bac..7c0a1cb1 100644
--- a/src/app/(site)/layout.tsx
+++ b/src/app/(site)/layout.tsx
@@ -56,6 +56,7 @@ export default async function RootLayout({
       className={`no-js ${FONT_CLASSES}`}
     >
       <head>
+        {/* biome-ignore lint/security/noDangerouslySetInnerHtml: a constant script that sets the theme before first paint. */}
         <script dangerouslySetInnerHTML={{ __html: THEME_BOOTSTRAP }} />
       </head>
       <body>
diff --git a/src/app/(site)/page.tsx b/src/app/(site)/page.tsx
index 910b1835..ce776691 100644
--- a/src/app/(site)/page.tsx
+++ b/src/app/(site)/page.tsx
@@ -49,6 +49,7 @@ export default async function Home() {
     <div className={styles.home}>
       <script
         type="application/ld+json"
+        // biome-ignore lint/security/noDangerouslySetInnerHtml: JSON-LD from our own data; jsonLdScript escapes every <.
         dangerouslySetInnerHTML={{ __html: jsonLdScript(homeJsonLd()) }}
       />
       <section className={styles.hero}>
diff --git a/src/bench/components/Chart.empty-window.test.tsx b/src/bench/components/Chart.empty-window.test.tsx
index 6473c8a6..8e1924bb 100644
--- a/src/bench/components/Chart.empty-window.test.tsx
+++ b/src/bench/components/Chart.empty-window.test.tsx
@@ -105,10 +105,9 @@ describe('empty-window charts hide by default and the toggle reveals them', () =
       }
     });
     root = {
-      unmount: () =>
-        roots.forEach((r) => {
-          r.unmount();
-        }),
+      unmount: () => {
+        for (const r of roots) r.unmount();
+      },
       render: () => {},
     } as unknown as Root;
     // Let the bundle fetch resolve, prime the cache, classify, and re-render.
diff --git a/src/bench/components/Chart.lazy-hydration.test.tsx b/src/bench/components/Chart.lazy-hydration.test.tsx
index 621227c5..092027fd 100644
--- a/src/bench/components/Chart.lazy-hydration.test.tsx
+++ b/src/bench/components/Chart.lazy-hydration.test.tsx
@@ -130,10 +130,9 @@ describe('PR-5.0.95 landing-page lazy hydration', () => {
     });
     // A teardown handle the shared afterEach can unmount (every island at once).
     root = {
-      unmount: () =>
-        roots.forEach((r) => {
-          r.unmount();
-        }),
+      unmount: () => {
+        for (const r of roots) r.unmount();
+      },
       render: () => {},
     } as unknown as Root;
     await act(async () => {
@@ -302,9 +301,7 @@ describe('PR-5.0.95 landing-page lazy hydration', () => {
       expect(scheduleSpy.mock.calls.length).toBeGreaterThan(scheduledAfterOpen);
     } finally {
       // Drain the module-singleton queue so later tests are not affected.
-      rejecters.forEach((reject) => {
-        reject(new Error('test cleanup'));
-      });
+      for (const reject of rejecters) reject(new Error('test cleanup'));
       await act(async () => {
         await Promise.resolve();
         await Promise.resolve();
@@ -402,10 +399,9 @@ describe('PR-5.0.97 group-bundle hydration', () => {
       }
     });
     root = {
-      unmount: () =>
-        roots.forEach((r) => {
-          r.unmount();
-        }),
+      unmount: () => {
+        for (const r of roots) r.unmount();
+      },
       render: () => {},
     } as unknown as Root;
     await act(async () => {
diff --git a/src/bench/components/GroupPermalink.test.tsx b/src/bench/components/GroupPermalink.test.tsx
index b8f74fe4..c204032a 100644
--- a/src/bench/components/GroupPermalink.test.tsx
+++ b/src/bench/components/GroupPermalink.test.tsx
@@ -86,7 +86,7 @@ describe('GroupPermalink click behavior', () => {
     root = null;
     container.remove();
     vi.useRealTimers();
-    delete (navigator as any).clipboard;
+    Reflect.deleteProperty(navigator, 'clipboard');
     window.history.replaceState(null, '', '/');
     initGroupFilter('random_access', [], []);
   });
diff --git a/src/bench/components/OpenGroupsScript.tsx b/src/bench/components/OpenGroupsScript.tsx
index 30643e07..c2511417 100644
--- a/src/bench/components/OpenGroupsScript.tsx
+++ b/src/bench/components/OpenGroupsScript.tsx
@@ -191,11 +191,13 @@ export function OpenGroupsScript({ children }: { children?: ReactNode }) {
     <>
       <script
         data-role="open-groups-bootstrap"
+        // biome-ignore lint/security/noDangerouslySetInnerHtml: a constant script that opens the URL's groups before hydration.
         dangerouslySetInnerHTML={{ __html: OPEN_GROUPS_BOOTSTRAP }}
       />
       {children}
       <script
         data-role="open-groups-finish"
+        // biome-ignore lint/security/noDangerouslySetInnerHtml: a constant script that opens the URL's groups before hydration.
         dangerouslySetInnerHTML={{ __html: OPEN_GROUPS_FINISH }}
       />
     </>
diff --git a/src/bench/styles/tokens.test.ts b/src/bench/styles/tokens.test.ts
index 4cfac685..26eb5956 100644
--- a/src/bench/styles/tokens.test.ts
+++ b/src/bench/styles/tokens.test.ts
@@ -27,7 +27,7 @@ const declsOf = (source: string) =>
 const decls = declsOf(css);
 const selectorsOf = (d: { sel: string }) => d.sel.split(',').map((s) => s.trim());
 /** The last value globals.css gives `prop` on exactly `selector`, as the cascade would. */
-const valueOf = (selector: string, prop: string) =>
+const lastValue = (selector: string, prop: string) =>
   decls.filter((d) => selectorsOf(d).includes(selector) && d.prop === prop).at(-1)?.value;
 
 // The system's colour roles, from the tokens stylesheet.
@@ -98,31 +98,31 @@ describe("bench's stylesheet on the system's tokens", () => {
   // Words take accent-ink; fills take accent with on-accent text. In Light the two are one Blue.
   it('fills with accent and writes on it in on-accent', () => {
     for (const sel of ['.filter-badge', '.filter-chip--active']) {
-      expect(valueOf(sel, 'background'), sel).toBe('var(--accent)');
-      expect(valueOf(sel, 'color'), sel).toBe('var(--on-accent)');
+      expect(lastValue(sel, 'background'), sel).toBe('var(--accent)');
+      expect(lastValue(sel, 'color'), sel).toBe('var(--on-accent)');
     }
-    expect(valueOf('.filter-chip--active:hover', 'border-color')).toBe('var(--accent)');
-    expect(valueOf('.toolbar-slider', 'accent-color')).toBe('var(--accent)');
-    expect(valueOf('.chart-range-strip-handle', 'background')).toBe('var(--accent)');
-    expect(valueOf('a', 'color')).toBe('var(--accent-ink)');
+    expect(lastValue('.filter-chip--active:hover', 'border-color')).toBe('var(--accent)');
+    expect(lastValue('.toolbar-slider', 'accent-color')).toBe('var(--accent)');
+    expect(lastValue('.chart-range-strip-handle', 'background')).toBe('var(--accent)');
+    expect(lastValue('a', 'color')).toBe('var(--accent-ink)');
   });
 
   // The system's States rule: a pressed switch sits on surface in ink inside a raised group, and
   // a switch is never Blue.
   it('draws the linear and log toggles as a switch, with no Blue', () => {
-    expect(valueOf('.toolbar-btn', 'background')).toBe('var(--raised)');
-    expect(valueOf('.toolbar-btn', 'color')).toBe('var(--ink-muted)');
+    expect(lastValue('.toolbar-btn', 'background')).toBe('var(--raised)');
+    expect(lastValue('.toolbar-btn', 'color')).toBe('var(--ink-muted)');
     for (const sel of ['.toolbar-btn--active', '.toolbar-btn--active:hover']) {
-      expect(valueOf(sel, 'background'), sel).toBe('var(--surface)');
-      expect(valueOf(sel, 'border-color'), sel).toBe('var(--line)');
-      expect(valueOf(sel, 'color'), sel).toBe('var(--ink)');
+      expect(lastValue(sel, 'background'), sel).toBe('var(--surface)');
+      expect(lastValue(sel, 'border-color'), sel).toBe('var(--line)');
+      expect(lastValue(sel, 'color'), sel).toBe('var(--ink)');
     }
   });
 
   it('gives cards the card radius and controls the control radius', () => {
-    expect(valueOf('.group-details', 'border-radius')).toBe('var(--radius-card)');
+    expect(lastValue('.group-details', 'border-radius')).toBe('var(--radius-card)');
     for (const control of ['.control-btn', '.toolbar-btn', '.filter-chip']) {
-      expect(valueOf(control, 'border-radius'), control).toBe('var(--radius-control)');
+      expect(lastValue(control, 'border-radius'), control).toBe('var(--radius-control)');
     }
   });
 
@@ -135,10 +135,10 @@ describe("bench's stylesheet on the system's tokens", () => {
   });
 
   it('sets the header buttons as mono labels, mutes ranks, and squares the badges', () => {
-    expect(valueOf('.control-btn', 'font-family')).toBe('var(--font-mono)');
-    expect(valueOf('.score-rank', 'color')).toBe('var(--ink-muted)');
+    expect(lastValue('.control-btn', 'font-family')).toBe('var(--font-mono)');
+    expect(lastValue('.score-rank', 'color')).toBe('var(--ink-muted)');
     for (const sel of ['.filter-badge', '.group-count']) {
-      expect(valueOf(sel, 'border-radius'), sel).toBe('2px');
+      expect(lastValue(sel, 'border-radius'), sel).toBe('2px');
     }
   });
 
@@ -175,12 +175,12 @@ describe("bench's stylesheet on the system's tokens", () => {
   // The system's header (has-tools) sticks and holds the controls, so bench draws no toolbar.
   it("puts the controls on the system's sticky header, and draws no toolbar of its own", () => {
     expect(css).not.toMatch(/\.bench-toolbar[\s,{]|\.bench-title/);
-    expect(valueOf(':root', '--toolbar-height')).toBe('64px');
+    expect(lastValue(':root', '--toolbar-height')).toBe('64px');
     // `hidden` on the root would make body a scroll container that never scrolls, and the
     // header would stick to it, not to the window; `clip` clips without one.
-    expect(valueOf('body', 'overflow-x')).toBe('clip');
+    expect(lastValue('body', 'overflow-x')).toBe('clip');
     // The fixed Groups button needs room under the footer, or it covers the footer's mark.
-    expect(valueOf('.bench-frame:has(.group-nav-toggle)', 'padding-bottom')).toBe('3.5rem');
+    expect(lastValue('.bench-frame:has(.group-nav-toggle)', 'padding-bottom')).toBe('3.5rem');
     // Below 1260px the buttons' words hide, but the Filters count stays in view.
     expect(css).toMatch(
       /@media \(max-width: 1260px\) \{\s*\.bench-toolbar-controls \.vx-btn > span:not\(\.filter-badge\),/,
@@ -193,7 +193,7 @@ describe("bench's stylesheet on the system's tokens", () => {
     expect(css).toMatch(
       /@media \(max-width: 400px\) \{\s*\.vx-header-tools \.vx-btn \{\s*padding-inline: 0\.4rem;/,
     );
-    expect(valueOf('main', 'padding')).toBe('var(--space-16) var(--page-pad)');
+    expect(lastValue('main', 'padding')).toBe('var(--space-16) var(--page-pad)');
     expect(css).not.toMatch(/sticky-header|site-title|repo-link|nav-controls|logo-link/);
   });
 
@@ -201,15 +201,15 @@ describe("bench's stylesheet on the system's tokens", () => {
   // Vortex's rows only: the other formats' scores are in ink-body.
   it('sets group names and scores in mono, with Blue only on Vortex', () => {
     for (const sel of ['.group-name', '.scores-title', '.score-item']) {
-      expect(valueOf(sel, 'font-family'), sel).toBe('var(--font-mono)');
+      expect(lastValue(sel, 'font-family'), sel).toBe('var(--font-mono)');
     }
     // Will's B (2026-11-03): weight 400 at 13px read too thin, Light most of all.
-    expect(valueOf('.group-name', 'font-weight')).toBe('600');
-    expect(valueOf('.scores-title', 'font-size')).toBe('13px');
-    expect(valueOf('.scores-title', 'color')).toBe('var(--ink-body)');
-    expect(valueOf('.score-item', 'font-size')).toBe('14px');
-    expect(valueOf('.score-series', 'font-weight')).toBe('500');
-    expect(valueOf('.score-value', 'color')).toBe('var(--ink-body)');
+    expect(lastValue('.group-name', 'font-weight')).toBe('600');
+    expect(lastValue('.scores-title', 'font-size')).toBe('13px');
+    expect(lastValue('.scores-title', 'color')).toBe('var(--ink-body)');
+    expect(lastValue('.score-item', 'font-size')).toBe('14px');
+    expect(lastValue('.score-series', 'font-weight')).toBe('500');
+    expect(lastValue('.score-value', 'color')).toBe('var(--ink-body)');
     expect(
       decls.some(
         (d) =>
@@ -229,7 +229,7 @@ describe("bench's stylesheet on the system's tokens", () => {
 
   it('clips sideways overflow on html and body, so sticky headers keep working', () => {
     for (const sel of ['html', 'body']) {
-      expect(valueOf(sel, 'overflow-x'), sel).toBe('clip');
+      expect(lastValue(sel, 'overflow-x'), sel).toBe('clip');
     }
   });
 
@@ -260,7 +260,7 @@ describe("bench's stylesheet on the system's tokens", () => {
     // retries it.
     for (const state of ['windowed', 'error']) {
       const sel = `.chart-window-chip[data-state='${state}']:not(:disabled):active`;
-      expect(valueOf(sel, 'background'), sel).toBeDefined();
+      expect(lastValue(sel, 'background'), sel).toBeDefined();
     }
   });
 });
diff --git a/src/components/install-tabs/index.tsx b/src/components/install-tabs/index.tsx
index 4c76a747..2b7071d1 100644
--- a/src/components/install-tabs/index.tsx
+++ b/src/components/install-tabs/index.tsx
@@ -96,6 +96,7 @@ export function InstallTabs({ sparkVersion }: { sparkVersion: string | null }) {
               data-label={tab.label}
             >
               {tab.lines.map((line, n) => (
+                // biome-ignore lint/suspicious/noArrayIndexKey: a tab's lines are constant and never reorder.
                 <span key={n}>
                   {n > 0 && "\n"}
                   {line.prompt && (
diff --git a/src/components/logo-banner/index.tsx b/src/components/logo-banner/index.tsx
index 8dcf7899..9b458970 100644
--- a/src/components/logo-banner/index.tsx
+++ b/src/components/logo-banner/index.tsx
@@ -68,6 +68,7 @@ export function LogoBanner({ className }: { className?: string | undefined }) {
         <div className="vx-logos-track">
           {Array.from({ length: copies }, (_, i) => (
             <div
+              // biome-ignore lint/suspicious/noArrayIndexKey: the copies are identical, so the index is their only identity.
               key={i}
               ref={i === 0 ? first : undefined}
               className="vx-logos-set"

From fb8b1c1825f4d1c0ca41c924c1c7a223b95f11d8 Mon Sep 17 00:00:00 2001
From: Will Manning <will@willmanning.io>
Date: Wed, 4 Nov 2026 02:01:22 -0500
Subject: [PATCH 2/9] Add editor and Git defaults and a PR template, and clear
 stale tooling notes

.editorconfig gives LF, UTF-8, and 2-space defaults to the files Biome does
not format. .gitattributes stores text with LF endings, keeps the license
texts unchanged, and marks bun.lock as generated and src/vendor as
vendored. The PR template asks for the DCO sign-off, check:ci, and a REUSE
annotation for each new asset.

Remove what Tailwind left behind (the VS Code extension and settings, the
Renovate group, and stale notes), add the license to package.json, and
bring the README up to date: Bun 1.4, Node 26, bench, and the test scripts.

Signed-off-by: Will Manning <will@willmanning.io>
---
 .editorconfig                    | 26 ++++++++++++++++++++++++++
 .gitattributes                   | 10 ++++++++++
 .github/pull_request_template.md | 11 +++++++++++
 .vscode/extensions.json          |  2 +-
 .vscode/settings.json            |  9 +--------
 CLAUDE.md                        |  2 +-
 README.md                        |  8 +++++++-
 REUSE.toml                       |  2 ++
 package.json                     |  1 +
 renovate.json                    |  4 ----
 scripts/verify.ts                |  4 ++--
 11 files changed, 62 insertions(+), 17 deletions(-)
 create mode 100644 .editorconfig
 create mode 100644 .gitattributes
 create mode 100644 .github/pull_request_template.md

diff --git a/.editorconfig b/.editorconfig
new file mode 100644
index 00000000..166bac86
--- /dev/null
+++ b/.editorconfig
@@ -0,0 +1,26 @@
+# Editor defaults for files Biome does not format (Markdown, YAML, SQL, shell,
+# and Python). Biome reads this file too, but biome.json's settings win.
+root = true
+
+[*]
+charset = utf-8
+end_of_line = lf
+indent_style = space
+indent_size = 2
+insert_final_newline = true
+trim_trailing_whitespace = true
+
+[*.py]
+indent_size = 4
+
+[*.md]
+trim_trailing_whitespace = false
+
+# The license texts stay as REUSE downloaded them.
+[LICENSES/**]
+charset = unset
+end_of_line = unset
+indent_style = unset
+indent_size = unset
+insert_final_newline = unset
+trim_trailing_whitespace = unset
diff --git a/.gitattributes b/.gitattributes
new file mode 100644
index 00000000..d7c20339
--- /dev/null
+++ b/.gitattributes
@@ -0,0 +1,10 @@
+# Store text files with LF endings, on every platform.
+* text=auto eol=lf
+
+# The license texts stay byte for byte as REUSE downloaded them.
+LICENSES/** -text
+
+# Generated or vendored: collapse them in diffs and leave them out of the
+# language statistics.
+bun.lock linguist-generated
+src/vendor/** linguist-vendored
diff --git a/.github/pull_request_template.md b/.github/pull_request_template.md
new file mode 100644
index 00000000..a13c5851
--- /dev/null
+++ b/.github/pull_request_template.md
@@ -0,0 +1,11 @@
+## What changes
+
+<!-- What a reader of the site, or a contributor, sees. Name the site: vortex.dev, bench, or both. -->
+
+## How it was checked
+
+<!-- The commands you ran and what you looked at. For a visual change, add before and after screenshots. -->
+
+- [ ] Every commit is signed off (`git commit -s`), for the DCO check.
+- [ ] `bun run check:ci` passes.
+- [ ] Each new image or other asset has an annotation in `REUSE.toml`.
diff --git a/.vscode/extensions.json b/.vscode/extensions.json
index d2224138..699ed733 100644
--- a/.vscode/extensions.json
+++ b/.vscode/extensions.json
@@ -1,3 +1,3 @@
 {
-  "recommendations": ["tailwindcss.tailwindcss-intellisense", "biomejs.biome"]
+  "recommendations": ["biomejs.biome"]
 }
diff --git a/.vscode/settings.json b/.vscode/settings.json
index 8bd28082..296f0ac6 100644
--- a/.vscode/settings.json
+++ b/.vscode/settings.json
@@ -6,12 +6,5 @@
   },
   "[css]": {
     "editor.formatOnSave": false
-  },
-  "tailwindCSS.classAttributes": [
-    "class",
-    "className",
-    ".*ClassName",
-    "ngClass",
-    ".*Styles"
-  ]
+  }
 }
diff --git a/CLAUDE.md b/CLAUDE.md
index e21f89a2..83a76f8e 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -149,7 +149,7 @@ Defense in depth against the npm-worm class (Shai-Hulud, mini-Shai-Hulud, the Ma
 5. **`actions/dependency-review-action`** runs on every PR and **hard-fails** the build if the PR introduces a new advisory at severity `high` or above in a runtime-scope package. With `bun audit` informational, this is the only advisory check that blocks merge — deliberately scoped to what the PR itself adds, not the whole pre-existing tree.
     - **It sees `bun.lock` through a submitted snapshot.** GitHub's dependency graph does not read `bun.lock`, so `.github/workflows/dependency-snapshot.yml` runs `scripts/dependency-snapshot.ts` on every push to main and on the head commit of every same-repository PR. It posts one manifest per workspace (one, `bun.lock (vortex)`, since bench joined the root package) to the Dependency Submission API, listing every package that workspace reaches with a scope: `runtime` if a workspace's `dependencies` or `optionalDependencies` reach it, `development` otherwise. An optional peer, like Next.js's Playwright, does not pull its package into `runtime`.
     - **A guard fails the review when the snapshot is missing.** The action reviews whatever graph it finds, so without the snapshot it would pass without `bun.lock`'s packages. Before the action, the job's "Require the bun.lock snapshot" step waits up to 10 minutes for the snapshot job (`Submit bun.lock`) on the PR's head commit, and fails unless that job succeeded. A fork PR gets no snapshot, because its token cannot write, so the guard fails a fork PR that changes `bun.lock` (make that change from a branch in this repository) and passes one that does not, because it adds no locked package. After the guard, the action still waits up to 300 seconds (`retry-on-snapshot-warnings`) while GitHub processes the snapshot. If you rename the snapshot job, change the guard's `SNAPSHOT_CHECK` with it.
-    - **It fails on runtime scope only.** `fail-on-scopes` is left at the action's default, `runtime` (`action.yml` declares no default; the action's schema and README give `runtime`). An advisory in a `development`-scope package does not block merge. That includes bench's development tools (Vitest, testcontainers, jsdom and what they pull in), whose advisories blocked bench PRs under pnpm. `bun audit` is where those advisories show: it reports the whole tree on every run, and the "Audit advisories" list below records the accepted ones. Runtime means reachable from `dependencies`, which includes build-time tools the site lists there (velite, tailwindcss, `@tailwindcss/typography`).
+    - **It fails on runtime scope only.** `fail-on-scopes` is left at the action's default, `runtime` (`action.yml` declares no default; the action's schema and README give `runtime`). An advisory in a `development`-scope package does not block merge. That includes bench's development tools (Vitest, testcontainers, jsdom and what they pull in), whose advisories blocked bench PRs under pnpm. `bun audit` is where those advisories show: it reports the whole tree on every run, and the "Audit advisories" list below records the accepted ones. Runtime means reachable from `dependencies`, which includes build-time tools the site lists there, such as velite.
 6. **`trufflesecurity/trufflehog`** secret scan runs on every PR and push to main. Defense-in-depth on top of GitHub's push protection; catches verified secrets that slipped past push protection (low-entropy formats, detector patterns added after the secret was committed, or push-protection bypass).
 7. **OpenSSF Scorecard** (`.github/workflows/scorecard.yml`) grades the repo weekly on supply-chain hygiene (pinned actions, branch protection, token permissions, dangerous workflow patterns). SARIF posts to the Security tab; aggregate score publishes to https://scorecard.dev.
 8. **All third-party GitHub Actions are SHA-pinned**, not tag-pinned. A tag can be moved to point at a malicious commit (and has been, in prior supply-chain incidents); a SHA can't. Renovate's `helpers:pinGitHubActionDigests` preset enforces this on auto-bump PRs. When bumping an action manually, update both the SHA and the trailing `# vX.Y.Z` comment in the same diff.
diff --git a/README.md b/README.md
index 8abb952a..e7247a26 100644
--- a/README.md
+++ b/README.md
@@ -4,9 +4,11 @@
 
 Source for [vortex.dev](https://vortex.dev), the marketing site for [Vortex](https://github.com/vortex-data/vortex) — an extensible, state-of-the-art columnar file format. Vortex is a [Linux Foundation](https://www.linuxfoundation.org/) incubating project, a Series of LF Projects, LLC.
 
+The same Next.js app also serves [bench.vortex.dev](https://bench.vortex.dev), the benchmark results site. Its code is in `src/bench/` and `src/app/(bench)/`, and its docs start at [docs/bench/README.md](docs/bench/README.md).
+
 ## Local development
 
-Prerequisites: [Bun](https://bun.sh) ≥ 1.3.13 and Node ≥ 22. Bun is the package manager and script runner; Next.js itself runs on Node.
+Prerequisites: [Bun](https://bun.sh) 1.4 (the `packageManager` in `package.json`) and Node 26 (`.nvmrc`). Bun is the package manager and script runner; Next.js itself runs on Node.
 
 ```bash
 git clone git@github.com:vortex-data/vortex.dev.git
@@ -15,6 +17,8 @@ bun install
 bun dev          # Turbopack dev server on http://localhost:3000
 ```
 
+bench is at http://localhost:3000/bench. It needs the `BENCH_DB_*` variables for a database ([docs/bench/web.md](docs/bench/web.md)).
+
 ## Scripts
 
 | Command | What it does |
@@ -25,6 +29,8 @@ bun dev          # Turbopack dev server on http://localhost:3000
 | `bun run check` | Biome lint + format + import-organize, with auto-fix |
 | `bun run check:ci` | Biome no-write check — what CI runs |
 | `bun run typecheck` | `tsc --noEmit`. Must run after `bun run build` because velite populates `.velite/` and Next emits `next-env.d.ts` during build |
+| `bun run test` | The marketing site's unit tests (`bun test tests/unit`) |
+| `bun run test:bench` | bench's tests on Vitest. Its Postgres integration suite needs Docker or `BENCH_TEST_DATABASE_URL`, and skips without either |
 | `bun run verify` | HTTP suite against a running server: sitemap, robots, RSS, OG, canonicals, JSON-LD, theme parity, `/api/subscribe`, internal links |
 | `bun run test:e2e` | Playwright browser smoke (Chromium desktop + WebKit iPhone-13). One-time setup: `bun run test:e2e:install` |
 | `bun run lighthouse` | Local Lighthouse CI run against a server you started, at `BASE_URL` (default `http://localhost:3000`; bench's pages need its `BENCH_DB_*` variables). Fetches a pinned `@lhci/cli` with `bunx`; it is not a dependency |
diff --git a/REUSE.toml b/REUSE.toml
index d2680e6f..c5c45697 100644
--- a/REUSE.toml
+++ b/REUSE.toml
@@ -21,6 +21,8 @@ path = [
   "tests/**",
   ".github/**",
   ".vscode/**",
+  ".editorconfig",
+  ".gitattributes",
   ".gitignore",
   ".nvmrc",
   "*.cjs",
diff --git a/package.json b/package.json
index 46a36d49..aa710578 100644
--- a/package.json
+++ b/package.json
@@ -2,6 +2,7 @@
   "name": "vortex",
   "version": "0.1.0",
   "private": true,
+  "license": "Apache-2.0",
   "packageManager": "bun@1.4.4",
   "engines": {
     "node": "26.x",
diff --git a/renovate.json b/renovate.json
index 6ecfda4c..176454de 100644
--- a/renovate.json
+++ b/renovate.json
@@ -49,10 +49,6 @@
         "@types/react-dom"
       ]
     },
-    {
-      "groupName": "TailwindCSS",
-      "matchPackageNames": ["tailwindcss", "@tailwindcss/**"]
-    },
     {
       "groupName": "MDX content pipeline",
       "matchPackageNames": [
diff --git a/scripts/verify.ts b/scripts/verify.ts
index 5b998376..5690c2dc 100644
--- a/scripts/verify.ts
+++ b/scripts/verify.ts
@@ -382,8 +382,8 @@ async function checkInternalLinks(
 // generation paints with one shade and the site renders with another —
 // exactly the bug this check is here to catch. Currently only
 // `THEME.background` has a corresponding CSS variable (`--background` in
-// `:root`); `THEME.foreground` is white-on-dark and uses Tailwind's
-// built-in `text-white`, so there's nothing to assert against in CSS.
+// `:root`); `THEME.foreground` has no variable in `globals.css`, so there's
+// nothing to assert against in CSS.
 async function checkThemeParity(): Promise<void> {
   let css: string;
   try {

From 2eed03774b79c92db2f92c4c34ed6977925579e7 Mon Sep 17 00:00:00 2001
From: Will Manning <will@willmanning.io>
Date: Wed, 4 Nov 2026 02:03:10 -0500
Subject: [PATCH 3/9] Check the blog's external links each week

links.yml runs lychee (lychee-action v2.9.0, pinned by SHA) on the blog
posts and on the posts from other sites that the blog index lists. It runs
weekly, on a PR that changes src/content, and by hand. It is not a required
check. LinkedIn and the ACM Digital Library block automated requests, so the
check skips them.

Signed-off-by: Will Manning <will@willmanning.io>
---
 .github/workflows/links.yml | 60 +++++++++++++++++++++++++++++++++++++
 CLAUDE.md                   |  4 +--
 2 files changed, 62 insertions(+), 2 deletions(-)
 create mode 100644 .github/workflows/links.yml

diff --git a/.github/workflows/links.yml b/.github/workflows/links.yml
new file mode 100644
index 00000000..d0514650
--- /dev/null
+++ b/.github/workflows/links.yml
@@ -0,0 +1,60 @@
+name: Links
+
+# Checks the external links in the blog: the posts in src/content/blog and the
+# posts on other sites that the blog index lists (src/content/links.ts).
+# `bun run verify` already checks the site's internal links on every PR.
+#
+# Not a required check, so a broken link never blocks a merge. It runs:
+#   - weekly, because a page on another site can disappear at any time
+#   - on a PR that changes the blog's content, to catch a mistyped link
+#   - by hand (workflow_dispatch)
+# The job summary lists each broken link.
+
+on:
+  schedule:
+    - cron: "0 9 * * 1"
+  pull_request:
+    paths:
+      - "src/content/**"
+      - ".github/workflows/links.yml"
+  workflow_dispatch:
+
+concurrency:
+  group: links-${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
+jobs:
+  lychee:
+    name: External links
+    runs-on: ubuntu-26.04
+    timeout-minutes: 10
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
+        with:
+          persist-credentials: false
+
+      # The action downloads the lychee binary named by lycheeVersion from
+      # lychee's GitHub releases. The job has read-only contents access and no
+      # secrets, so that binary can read only the public repository.
+      #
+      # Excluded hosts block automated requests, so they fail when the page is
+      # there: LinkedIn answers 999, and the ACM Digital Library (doi.org
+      # 10.1145) answers 403. The action passes the job's GitHub token, which
+      # raises GitHub's rate limit.
+      - name: Check links
+        uses: lycheeverse/lychee-action@e7477775783ea5526144ba13e8db5eec57747ce8  # v2.9.0
+        with:
+          lycheeVersion: v0.24.2
+          args: >-
+            --no-progress
+            --max-retries 3
+            --timeout 30
+            --accept 200..=299,429
+            --exclude '^https://(www\.)?linkedin\.com/'
+            --exclude '^https://doi\.org/10\.1145/'
+            --exclude '^https://dl\.acm\.org/'
+            'src/content/**/*.mdx'
+            src/content/links.ts
diff --git a/CLAUDE.md b/CLAUDE.md
index 83a76f8e..8e88845a 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -27,7 +27,7 @@ How the two sites share the app:
 - **Root layouts.** Each site has its own, so Next.js has none to draw an unmatched URL's 404 in. `src/app/global-not-found.tsx` (`experimental.globalNotFound`) is the site's 404, in the site's layout, prerendered for every unmatched URL; a catch-all route (`src/app/(bench)/bench/[...notFound]`) keeps bench's unmatched paths in bench's own layout. `robots.ts` stays at the app root, where Next.js reads it; the favicon is `public/favicon.ico`, named in the site's metadata, because the `app/favicon.ico` convention would also put it on bench's pages. Next.js serves a metadata image route inside a route group with a hash suffix (`/opengraph-image-12o0cb`), and the og:image tags name that URL; rewrites in `next.config.mjs` keep the plain `/opengraph-image` URLs (which the posts' JSON-LD names) serving the same images.
 - **Headers.** The CSP and the other security headers in `next.config.mjs` cover both sites: one policy, since both self-host their fonts. bench now sends the site's security headers, including `X-Frame-Options: DENY` and `frame-ancestors 'none'`, so no other site can embed bench's pages in a frame. `vercel.json` holds bench's cron (`/bench/api/health`) and bench's CDN rule for its landing, chart, and methodology pages on bench.vortex.dev (header rules match the path as requested, before the rewrites). bench's HTML differs between its two URL forms, so the `/bench` form gets the CDN rule only outside production (`benchPrefixCdnRules` in `next.config.mjs`): a cached `/bench` page must never answer for bench.vortex.dev.
 - **Toolchain.** One package: one `package.json`, one `bun.lock`, one `bunfig.toml`, one `tsconfig.json`. Next.js 16.4.1, React 19.3 and TypeScript 7. `tsconfig.json` has every strict flag either app had, including bench's `noFallthroughCasesInSwitch` and `noUncheckedSideEffectImports`; `src/css.d.ts` types the CSS side-effect imports. The root `biome.json` lints and formats both sites: an override keeps bench's files (`src/bench`, `src/app/(bench)`, the parity and deploy checks, `vitest.config.ts`) in bench's old Prettier style (single quotes, trailing commas, 100 columns) with bench's lint rules (see "bench" below), and `bun run check:ci` checks all of it. bench's tests run on Vitest from the root `vitest.config.ts`, scoped to bench's files; the site's run on `bun test`. bench's PostCSS config sits beside its stylesheets (`src/bench/styles/postcss.config.mjs`), and Turbopack applies it to those alone: with no config at the root, the site's CSS gets Turbopack's defaults.
-- **CI.** Every check covers both sites and runs on every change; nothing is split by which site a change touches. `ci.yml`'s `Lint, build, verify` runs Biome on the whole repository, one build, the typecheck, the site's unit tests, bench's Vitest suite with its Postgres integration tests (testcontainers, so the runner needs Docker), the migration-runner (`db/tests`), infrastructure (`infra/tests`), parity and deploy-check tests, `bun run verify`, and the Playwright smoke specs. Dependency review, the secret scan, REUSE and the non-blocking `bun audit` run beside it.
+- **CI.** Every check covers both sites and runs on every change; nothing is split by which site a change touches. `ci.yml`'s `Lint, build, verify` runs Biome on the whole repository, one build, the typecheck, the site's unit tests, bench's Vitest suite with its Postgres integration tests (testcontainers, so the runner needs Docker), the migration-runner (`db/tests`), infrastructure (`infra/tests`), parity and deploy-check tests, `bun run verify`, and the Playwright smoke specs. Dependency review, the secret scan, REUSE and the non-blocking `bun audit` run beside it. `links.yml` checks the blog's external links with lychee each week and on a PR that changes `src/content/`; it is not a required check, so a broken link on another site never blocks a merge.
 - **Lighthouse and axe.** `lighthouse.yml` audits both sites on the pull request's Vercel preview, because bench renders from its database and only a deployment has one. Its jobs run in parallel, each on its own runner, since a second audit or browser on the same CPU would skew Lighthouse's timings. Each one waits for the preview (Vercel's GitHub deployment in the `Preview` environment, through the `.github/actions/preview-proxy` action) and requests its page once to get past the cold start. Five Lighthouse jobs each audit one page, named by `LHCI_PAGE`: `/`, `/blog`, the newest post, `/bench` and one bench chart page (`lighthouserc.cjs` holds the pages, the thresholds and their rationale). The `axe` job runs `tests/a11y.spec.ts` (`--grep @axe`: WCAG 2.1 A and AA, and a serious or critical violation fails). The `report` job, the required check `Lighthouse and axe`, posts one score table on the PR from the Lighthouse jobs' reports and fails unless every job passed. The preview is reached through `scripts/preview-proxy.mjs`, which adds the `VERCEL_AUTOMATION_BYPASS_SECRET` header only to requests for the preview, so no other origin a page loads from sees it. Fork and Dependabot PRs get no secrets, so the jobs are skipped for them, which counts as passing. The smoke run in `ci.yml` leaves the axe specs out (`--grep-invert @axe`). To run axe yourself: `BASE_URL=https://vortex.dev BENCH_URL=https://bench.vortex.dev bunx playwright test --grep @axe`.
 - **Deploys.** The `vortex` Vercel project builds and deploys the app, both sites, through the git integration, on every commit. `bench-verify-deploy.yml` runs `scripts/verify-web-deploy.mjs` on each production deployment Vercel reports, against bench under `/bench` on the deployment's own URL. Schema migrations go through `bench-schema-deploy.yml`, which only runs manually from `main` because the AWS role trusts nothing else.
 
@@ -153,7 +153,7 @@ Defense in depth against the npm-worm class (Shai-Hulud, mini-Shai-Hulud, the Ma
 6. **`trufflesecurity/trufflehog`** secret scan runs on every PR and push to main. Defense-in-depth on top of GitHub's push protection; catches verified secrets that slipped past push protection (low-entropy formats, detector patterns added after the secret was committed, or push-protection bypass).
 7. **OpenSSF Scorecard** (`.github/workflows/scorecard.yml`) grades the repo weekly on supply-chain hygiene (pinned actions, branch protection, token permissions, dangerous workflow patterns). SARIF posts to the Security tab; aggregate score publishes to https://scorecard.dev.
 8. **All third-party GitHub Actions are SHA-pinned**, not tag-pinned. A tag can be moved to point at a malicious commit (and has been, in prior supply-chain incidents); a SHA can't. Renovate's `helpers:pinGitHubActionDigests` preset enforces this on auto-bump PRs. When bumping an action manually, update both the SHA and the trailing `# vX.Y.Z` comment in the same diff.
-9. **Pinned runner images** (never `ubuntu-latest`), so runner-image bumps are deliberate PRs, not silent infrastructure drift. The checks (`ci.yml`, `lighthouse.yml`) and the repository-wide workflows (`dependency-snapshot.yml`, `scorecard.yml`, `claude.yml`) run on `ubuntu-26.04`, including bench's Docker (testcontainers) Postgres suite. bench's operational workflows run on `ubuntu-24.04`: `bench-verify-deploy.yml`, `bench-keep-warm.yml` and `bench-schema-deploy.yml`. Move them to 26.04 in a PR of their own. The Node version inside the runner image can still drift; `.nvmrc` pins that separately.
+9. **Pinned runner images** (never `ubuntu-latest`), so runner-image bumps are deliberate PRs, not silent infrastructure drift. The checks (`ci.yml`, `lighthouse.yml`) and the repository-wide workflows (`dependency-snapshot.yml`, `scorecard.yml`, `claude.yml`, `links.yml`) run on `ubuntu-26.04`, including bench's Docker (testcontainers) Postgres suite. bench's operational workflows run on `ubuntu-24.04`: `bench-verify-deploy.yml`, `bench-keep-warm.yml` and `bench-schema-deploy.yml`. Move them to 26.04 in a PR of their own. The Node version inside the runner image can still drift; `.nvmrc` pins that separately.
 
 ### Node version
 

From 60e1c008b39cfd29da352eab55d7ca87a1c25945 Mon Sep 17 00:00:00 2001
From: Will Manning <will@willmanning.io>
Date: Wed, 4 Nov 2026 02:08:24 -0500
Subject: [PATCH 4/9] Check the links in links.ts too

lychee skips a file whose extension is not in its extension list, even
when the file is named on the command line, and the default list has no
ts. Pass --extensions mdx,ts.

Signed-off-by: Will Manning <will@willmanning.io>
---
 .github/workflows/links.yml | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/links.yml b/.github/workflows/links.yml
index d0514650..ef9ccef0 100644
--- a/.github/workflows/links.yml
+++ b/.github/workflows/links.yml
@@ -43,7 +43,9 @@ jobs:
       # Excluded hosts block automated requests, so they fail when the page is
       # there: LinkedIn answers 999, and the ACM Digital Library (doi.org
       # 10.1145) answers 403. The action passes the job's GitHub token, which
-      # raises GitHub's rate limit.
+      # raises GitHub's rate limit. lychee skips a file whose extension is not
+      # in --extensions, even a file named here, and its default list has no
+      # `ts`.
       - name: Check links
         uses: lycheeverse/lychee-action@e7477775783ea5526144ba13e8db5eec57747ce8  # v2.9.0
         with:
@@ -53,6 +55,7 @@ jobs:
             --max-retries 3
             --timeout 30
             --accept 200..=299,429
+            --extensions mdx,ts
             --exclude '^https://(www\.)?linkedin\.com/'
             --exclude '^https://doi\.org/10\.1145/'
             --exclude '^https://dl\.acm\.org/'

From eb34895b72778f9d5dfd0b1145a01c84f0e60fe7 Mon Sep 17 00:00:00 2001
From: Will Manning <will@willmanning.io>
Date: Wed, 4 Nov 2026 02:10:19 -0500
Subject: [PATCH 5/9] Correct the note on lychee's --extensions

The previous commit said lychee skipped links.ts. It did not: the link
check counted 106 links both before and after --extensions mdx,ts, and the
files hold about 100, 32 of them in links.ts. lychee 0.24.2 checks a file
named on its command line whatever the extension. Keep the flag, and say
what it does.

Signed-off-by: Will Manning <will@willmanning.io>
---
 .github/workflows/links.yml | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/links.yml b/.github/workflows/links.yml
index ef9ccef0..9be4450e 100644
--- a/.github/workflows/links.yml
+++ b/.github/workflows/links.yml
@@ -43,8 +43,10 @@ jobs:
       # Excluded hosts block automated requests, so they fail when the page is
       # there: LinkedIn answers 999, and the ACM Digital Library (doi.org
       # 10.1145) answers 403. The action passes the job's GitHub token, which
-      # raises GitHub's rate limit. lychee skips a file whose extension is not
-      # in --extensions, even a file named here, and its default list has no
+      # raises GitHub's rate limit. lychee 0.24.2 checks a file named here
+      # whatever its extension (the run counts 106 links with or without
+      # --extensions). The flag names `ts` anyway, because lychee's default
+      # extension list, which filters what it finds in directories, has no
       # `ts`.
       - name: Check links
         uses: lycheeverse/lychee-action@e7477775783ea5526144ba13e8db5eec57747ce8  # v2.9.0

From 897f0b110374f40f3af3b748379ca0f32aff220d Mon Sep 17 00:00:00 2001
From: Will Manning <will@willmanning.io>
Date: Wed, 4 Nov 2026 02:19:46 -0500
Subject: [PATCH 6/9] Order bench's CSS by specificity, and require a reason
 for !important

Turn on noDescendingSpecificity and noImportantStyles for both sites.

The 13 descending-specificity findings are fixed by moving rules, with no
change to any computed style: a check of every element on bench's landing,
chart, and methodology pages (with and without JavaScript) found the same
styles before and after. Each move passes no rule that sets the same
property at the same specificity on the same element. The later
.group-summary corner rule repeated the base rule's value, so it is gone.

bench's three !important declarations stay, each with a biome-ignore that
gives the reason: two beat Chart.js's inline canvas size, and one hides
controls that need JavaScript.

Signed-off-by: Will Manning <will@willmanning.io>
---
 biome.json                     |  12 +--
 src/app/(site)/page.module.css |   4 +-
 src/bench/styles/globals.css   | 151 ++++++++++++++++-----------------
 3 files changed, 80 insertions(+), 87 deletions(-)

diff --git a/biome.json b/biome.json
index 7a6380f8..14e45cff 100644
--- a/biome.json
+++ b/biome.json
@@ -66,7 +66,7 @@
         "useImportType": "error",
         "noNonNullAssertion": "off",
         "noParameterAssign": "error",
-        "noDescendingSpecificity": "off"
+        "noDescendingSpecificity": "error"
       },
       "correctness": {
         "noUnusedVariables": {
@@ -87,7 +87,8 @@
       },
       "complexity": {
         "noForEach": "error",
-        "noUselessFragments": "error"
+        "noUselessFragments": "error",
+        "noImportantStyles": "error"
       },
       "performance": {
         "noImgElement": "off"
@@ -123,13 +124,6 @@
           "quoteStyle": "single"
         }
       },
-      "linter": {
-        "rules": {
-          "complexity": {
-            "noImportantStyles": "off"
-          }
-        }
-      },
       "assist": {
         "actions": {
           "source": {
diff --git a/src/app/(site)/page.module.css b/src/app/(site)/page.module.css
index 208535c2..d9821d23 100644
--- a/src/app/(site)/page.module.css
+++ b/src/app/(site)/page.module.css
@@ -166,9 +166,9 @@
     padding: var(--space-64) var(--page-pad);
   }
 
+  .hero:has([data-mark-mode="static"], [data-mark-mode="error"]) > *,
   :global(.no-webgl) .hero > *,
-  :global(.no-js) .hero > *,
-  .hero:has([data-mark-mode="static"], [data-mark-mode="error"]) > * {
+  :global(.no-js) .hero > * {
     position: static;
     grid-column: 1;
   }
diff --git a/src/bench/styles/globals.css b/src/bench/styles/globals.css
index 99baf7bd..c23ac87b 100644
--- a/src/bench/styles/globals.css
+++ b/src/bench/styles/globals.css
@@ -86,6 +86,7 @@ a:hover {
  * `!important` beats every display rule those controls carry, the mobile
  * ones included. */
 .no-js [data-requires-js] {
+  /* biome-ignore lint/complexity/noImportantStyles: the rule must beat every display rule on these controls. */
   display: none !important;
 }
 
@@ -98,6 +99,13 @@ a:hover {
   min-height: 100dvh;
 }
 
+main {
+  width: 100%;
+  max-width: none;
+  margin: 0;
+  padding: var(--space-32) var(--page-pad);
+}
+
 .bench-frame > main {
   flex: 1 0 auto;
 }
@@ -201,6 +209,7 @@ a:hover {
   font-size: 18px;
   font-weight: 600;
 }
+.chart-card-title a,
 .page-header h1 a {
   color: var(--ink);
 }
@@ -210,18 +219,32 @@ a:hover {
   font-size: 0.875rem;
 }
 
-main {
-  width: 100%;
-  max-width: none;
-  margin: 0;
-  padding: var(--space-32) var(--page-pad);
-}
-
 .empty {
   color: var(--ink-muted);
   font-style: italic;
 }
 
+/* ----------------------------------------------------------------------
+ * Methodology page
+ * ---------------------------------------------------------------------- */
+.methodology {
+  max-width: 72ch;
+  line-height: 1.6;
+}
+
+.methodology h2 {
+  margin: 0 0 var(--space-16);
+}
+
+.methodology h3 {
+  margin: var(--space-32) 0 var(--space-8);
+  font-size: 1rem;
+}
+
+.methodology p {
+  margin: 0 0 var(--space-12);
+}
+
 /* The landing page's loading view (`HomeLoading`), streamed while a slow
  * read of the groups finishes. */
 .summary-loading {
@@ -310,6 +333,9 @@ main {
   color: var(--ink-muted);
   transition: transform 120ms ease;
 }
+.no-js .group-summary-row::before {
+  display: none;
+}
 .group-disclosure[open] > .group-summary .group-summary-row::before {
   transform: rotate(90deg);
 }
@@ -497,6 +523,14 @@ main {
   opacity: 1;
   visibility: visible;
 }
+.chart-grid {
+  width: 100%;
+  max-width: none;
+  display: grid;
+  grid-template-columns: 1fr;
+  gap: var(--space-16);
+}
+
 .group-body > .chart-grid {
   padding: var(--space-20);
   /* Page-level surface behind the chart cards. v2's `.benchmark-graphs`
@@ -515,6 +549,12 @@ main {
   margin: 0;
 }
 
+.chart-meta + .benchmark-scores-summary {
+  border: 1px solid var(--line);
+  border-radius: var(--radius-card);
+  margin-bottom: var(--space-16);
+}
+
 /* A collapsed group ends with its summary card: the section's own border
  * closes it. */
 .group-disclosure:not([open]) ~ .benchmark-scores-summary {
@@ -536,9 +576,6 @@ main {
 .no-js .group-summary {
   cursor: default;
 }
-.no-js .group-summary-row::before {
-  display: none;
-}
 .no-js .group-summary:hover .group-summary-row {
   background: none;
 }
@@ -550,12 +587,6 @@ main {
   margin-bottom: 0;
 }
 
-.chart-meta + .benchmark-scores-summary {
-  border: 1px solid var(--line);
-  border-radius: var(--radius-card);
-  margin-bottom: var(--space-16);
-}
-
 .scores-title {
   margin: 0 0 var(--space-8);
   color: var(--ink-body);
@@ -647,6 +678,20 @@ main {
   padding: 0.1rem 0 0.3rem;
 }
 
+.compression-size-group {
+  color: var(--ink-muted);
+  font-size: 0.75rem;
+  font-weight: 600;
+  text-align: center;
+}
+
+.compression-size-heading {
+  color: var(--ink-muted);
+  font-size: 0.72rem;
+  font-weight: 600;
+  text-align: center;
+}
+
 .compression-size-arrow-header .compression-size-group,
 .compression-size-arrow-header .compression-size-heading {
   grid-column: 3;
@@ -691,20 +736,6 @@ main {
   font-size: 0.875rem;
 }
 
-.compression-size-group {
-  color: var(--ink-muted);
-  font-size: 0.75rem;
-  font-weight: 600;
-  text-align: center;
-}
-
-.compression-size-heading {
-  color: var(--ink-muted);
-  font-size: 0.72rem;
-  font-weight: 600;
-  text-align: center;
-}
-
 .compression-size-value {
   text-align: center;
 }
@@ -1053,9 +1084,6 @@ main {
   gap: var(--space-8);
   flex-wrap: wrap;
 }
-.chart-card-title a {
-  color: var(--ink);
-}
 .chart-card-title a:hover {
   color: var(--accent-ink);
 }
@@ -1121,22 +1149,16 @@ main {
   border-color: color-mix(in srgb, var(--bad) 35%, transparent);
 }
 
-.chart-grid {
-  width: 100%;
-  max-width: none;
-  display: grid;
-  grid-template-columns: 1fr;
-  gap: var(--space-16);
-}
-
 .chart-wrap {
   width: 100%;
   position: relative;
   height: 420px;
 }
-.chart-card .chart-wrap canvas,
-.chart-wrap canvas {
+.chart-wrap canvas,
+.chart-card .chart-wrap canvas {
+  /* biome-ignore lint/complexity/noImportantStyles: only !important beats Chart.js's inline canvas size. */
   width: 100% !important;
+  /* biome-ignore lint/complexity/noImportantStyles: only !important beats Chart.js's inline canvas size. */
   height: 100% !important;
 }
 
@@ -1281,11 +1303,6 @@ main > .chart-card:not(.chart-grid .chart-card) .chart-wrap {
   font-size: 0.8rem;
   z-index: 1;
 }
-.chart-placeholder .chart-spinner {
-  width: 1.4rem;
-  height: 1.4rem;
-  border-width: 3px;
-}
 /* The placeholder's "loading…" label, sized to match the chip/loading text. */
 .chart-placeholder-text {
   font-size: 0.75rem;
@@ -1300,6 +1317,11 @@ main > .chart-card:not(.chart-grid .chart-card) .chart-wrap {
   border-radius: 50%;
   animation: chart-spin 0.7s linear infinite;
 }
+.chart-placeholder .chart-spinner {
+  width: 1.4rem;
+  height: 1.4rem;
+  border-width: 3px;
+}
 @keyframes chart-spin {
   to {
     transform: rotate(360deg);
@@ -1495,6 +1517,10 @@ main > .chart-card:not(.chart-grid .chart-card) .chart-wrap {
     flex-basis: 100%;
     margin-left: 0;
   }
+  .chart-grid {
+    grid-template-columns: 1fr;
+    gap: var(--space-8);
+  }
   .group-body > .chart-grid {
     padding: var(--space-12);
   }
@@ -1575,10 +1601,6 @@ main > .chart-card:not(.chart-grid .chart-card) .chart-wrap {
     flex: 1 1 auto;
     min-width: 6rem;
   }
-  .chart-grid {
-    grid-template-columns: 1fr;
-    gap: var(--space-8);
-  }
   .chart-wrap {
     height: 350px;
   }
@@ -1731,9 +1753,7 @@ a.site-footer-sha:hover code {
 .chart-card {
   border-radius: var(--radius-card);
 }
-.group-summary {
-  border-radius: var(--radius-card) var(--radius-card) 0 0;
-}
+
 .control-btn,
 .toolbar-btn,
 .group-toolbar-reset,
@@ -1793,24 +1813,3 @@ a.site-footer-sha:hover code {
 .chart-error-retry:active {
   background: color-mix(in srgb, var(--on-bad) 22%, transparent);
 }
-
-/* ----------------------------------------------------------------------
- * Methodology page
- * ---------------------------------------------------------------------- */
-.methodology {
-  max-width: 72ch;
-  line-height: 1.6;
-}
-
-.methodology h2 {
-  margin: 0 0 var(--space-16);
-}
-
-.methodology h3 {
-  margin: var(--space-32) 0 var(--space-8);
-  font-size: 1rem;
-}
-
-.methodology p {
-  margin: 0 0 var(--space-12);
-}

From 6a60b482ce9f1ed9ff0a644d33a0c5d39ead9660 Mon Sep 17 00:00:00 2001
From: Will Manning <will@willmanning.io>
Date: Wed, 4 Nov 2026 02:25:15 -0500
Subject: [PATCH 7/9] Replace non-null assertions, and turn on
 noNonNullAssertion

Production code now handles a missing value where it could occur: an
anchor falls back to the group's own, a rank lookup uses Object.hasOwn
with a fallback, and the query helpers default an absent row. mapLimit's
workers now share one iterator over the items.

Tests use a new helper, defined() in src/lib/defined.ts, which throws
with a message when a value is null or undefined, in place of `!`.

Signed-off-by: Will Manning <will@willmanning.io>
---
 biome.json                                    |  4 +-
 scripts/verify.ts                             |  4 +-
 src/app/(bench)/bench/page.test.ts            |  7 +-
 src/app/(bench)/bench/page.tsx                |  4 +-
 .../components/Chart.lazy-hydration.test.tsx  | 65 +++++++-------
 src/bench/components/Chart.lifecycle.test.tsx |  3 +-
 src/bench/components/Chart.loading.test.tsx   | 21 ++---
 src/bench/components/FilterBar.test.tsx       |  7 +-
 src/bench/components/LandingState.test.tsx    |  7 +-
 .../components/OpenGroupsScript.test.tsx      | 19 ++--
 src/bench/components/chart/config.ts          |  9 +-
 src/bench/lib/cache-fill.test.ts              | 23 ++---
 src/bench/lib/cache-fill.ts                   |  7 +-
 src/bench/lib/chart-format.test.ts            |  7 +-
 src/bench/lib/chart-format.ts                 | 38 +++++---
 src/bench/lib/data-cache.test.ts              | 11 +--
 src/bench/lib/group-charts.test.ts            |  7 +-
 src/bench/lib/groups.test.ts                  | 90 +++++++++++--------
 src/bench/lib/open-groups.test.ts             |  9 +-
 src/bench/lib/queries.ts                      | 21 ++---
 src/bench/lib/random-access.ts                |  3 +-
 src/bench/lib/schema-version.test.ts          |  3 +-
 src/bench/lib/site-files.test.ts              |  5 +-
 src/bench/lib/site-files.ts                   |  4 +-
 src/bench/lib/slug.test.ts                    |  5 +-
 src/bench/lib/summary.test.ts                 | 57 +++++++-----
 src/bench/lib/test-harness.ts                 |  3 +-
 src/bench/lib/vercel-config.test.ts           |  5 +-
 src/bench/styles/globals.spinner.test.ts      |  7 +-
 src/lib/defined.ts                            | 11 +++
 tests/unit/defined.test.ts                    | 24 +++++
 tests/unit/subscribe.test.ts                  |  6 +-
 32 files changed, 296 insertions(+), 200 deletions(-)
 create mode 100644 src/lib/defined.ts
 create mode 100644 tests/unit/defined.test.ts

diff --git a/biome.json b/biome.json
index 14e45cff..15713a00 100644
--- a/biome.json
+++ b/biome.json
@@ -64,9 +64,9 @@
       },
       "style": {
         "useImportType": "error",
-        "noNonNullAssertion": "off",
         "noParameterAssign": "error",
-        "noDescendingSpecificity": "error"
+        "noDescendingSpecificity": "error",
+        "noNonNullAssertion": "error"
       },
       "correctness": {
         "noUnusedVariables": {
diff --git a/scripts/verify.ts b/scripts/verify.ts
index 5690c2dc..8fbb20e1 100644
--- a/scripts/verify.ts
+++ b/scripts/verify.ts
@@ -160,7 +160,9 @@ async function checkSitemap(): Promise<string[]> {
     fail("sitemap.xml", `content-type=${r.ctype}`);
     return [];
   }
-  const locs = [...r.body.matchAll(/<loc>([^<]+)<\/loc>/g)].map((m) => m[1]!);
+  const locs = [...r.body.matchAll(/<loc>([^<]+)<\/loc>/g)].flatMap((m) =>
+    m[1] ? [m[1]] : []
+  );
   const required = ["/", "/blog"];
   const paths = locs.map((l) => l.replace(/^https?:\/\/[^/]+/, "") || "/");
   const missing = required.filter((p) => !paths.includes(p));
diff --git a/src/app/(bench)/bench/page.test.ts b/src/app/(bench)/bench/page.test.ts
index e555ff44..0671e1fa 100644
--- a/src/app/(bench)/bench/page.test.ts
+++ b/src/app/(bench)/bench/page.test.ts
@@ -7,6 +7,7 @@ import { renderToReadableStream, renderToStaticMarkup } from 'react-dom/server';
 import { afterEach, describe, expect, it, vi } from 'vitest';
 
 import type { Group } from '@/bench/lib/queries';
+import { defined } from '@/lib/defined';
 
 const { GROUPS, UNIVERSE, READ } = vi.hoisted(() => {
   const groups: Group[] = [
@@ -120,7 +121,7 @@ describe('the landing page', () => {
     const html = await streamedHtml();
     expect(html).not.toContain('Loading benchmark summaries');
     expect(html).not.toContain('<!--$?-->');
-    expect(visibleText(html)).toContain(GROUPS[0]!.name);
+    expect(visibleText(html)).toContain(defined(GROUPS[0]).name);
   });
 
   describe('on a slow read (a Data Cache miss)', () => {
@@ -143,13 +144,13 @@ describe('the landing page', () => {
       const text = visibleText(html);
       expect(text).toContain('Loading benchmark summaries');
       expect(text).toContain('Without JavaScript this page cannot finish loading.');
-      expect(text).not.toContain(GROUPS[0]!.name);
+      expect(text).not.toContain(defined(GROUPS[0]).name);
     });
 
     it('renders the groups once the read finishes', async () => {
       READ.ms = 400;
       const html = await streamedHtml();
-      expect(visibleText(html)).toContain(GROUPS[0]!.name);
+      expect(visibleText(html)).toContain(defined(GROUPS[0]).name);
     });
   });
 });
diff --git a/src/app/(bench)/bench/page.tsx b/src/app/(bench)/bench/page.tsx
index 4708af7f..a570c2ff 100644
--- a/src/app/(bench)/bench/page.tsx
+++ b/src/app/(bench)/bench/page.tsx
@@ -11,7 +11,7 @@ import { BenchHeader } from '@/bench/components/BenchHeader';
 import { HomeLoading } from '@/bench/components/HomeLoading';
 import { LandingState } from '@/bench/components/LandingState';
 import { OpenGroupsScript } from '@/bench/components/OpenGroupsScript';
-import { groupAnchors } from '@/bench/lib/anchor';
+import { groupAnchor, groupAnchors } from '@/bench/lib/anchor';
 import { type FilterUniverse, parseFilterCsv, singleSearchParam } from '@/bench/lib/chart-format';
 import { cachedFilterUniverse, cachedGroups } from '@/bench/lib/data-cache';
 import { parseGroupFilter } from '@/bench/lib/group-filter';
@@ -164,7 +164,7 @@ function HomeContent({ data: [params, groups, universe] }: { data: LandingData }
                   <GroupSection
                     key={group.slug}
                     group={group}
-                    anchor={anchors[i]!}
+                    anchor={anchors[i] ?? groupAnchor(group.name)}
                     startIndex={startIndex}
                     universe={universe}
                     initialHiddenSeries={
diff --git a/src/bench/components/Chart.lazy-hydration.test.tsx b/src/bench/components/Chart.lazy-hydration.test.tsx
index 092027fd..bf1299a7 100644
--- a/src/bench/components/Chart.lazy-hydration.test.tsx
+++ b/src/bench/components/Chart.lazy-hydration.test.tsx
@@ -12,6 +12,7 @@ import { GroupBody } from '@/bench/components/GroupBody';
 import { FETCH_TIMEOUT_MS } from '@/bench/lib/chart-format';
 import { PAGE_LEAVE_GRACE_MS } from '@/bench/lib/page-leave';
 import { bundleQueue, hydrationQueue, resetPayloadCache } from '@/bench/lib/chart-store';
+import { defined } from '@/lib/defined';
 
 vi.mock('@/bench/lib/chart-js', () => ({
   loadChartJs: () => new Promise(() => {}),
@@ -153,8 +154,8 @@ describe('PR-5.0.95 landing-page lazy hydration', () => {
   it('only intersecting (in-viewport) cards hydrate on group open', async () => {
     await renderGroup(5);
     await act(async () => {
-      MockIO.instances[0]!.fire(true);
-      MockIO.instances[1]!.fire(true);
+      defined(MockIO.instances[0]).fire(true);
+      defined(MockIO.instances[1]).fire(true);
       await Promise.resolve();
       await Promise.resolve();
     });
@@ -165,7 +166,7 @@ describe('PR-5.0.95 landing-page lazy hydration', () => {
     await renderGroup(5);
     expect(windowFetchCount()).toBe(0);
     await act(async () => {
-      MockIO.instances[4]!.fire(true);
+      defined(MockIO.instances[4]).fire(true);
       await Promise.resolve();
       await Promise.resolve();
     });
@@ -176,8 +177,8 @@ describe('PR-5.0.95 landing-page lazy hydration', () => {
     const scheduleSpy = vi.spyOn(hydrationQueue, 'schedule');
     await renderGroup(5);
     await act(async () => {
-      MockIO.instances[0]!.fire(true);
-      MockIO.instances[3]!.fire(true);
+      defined(MockIO.instances[0]).fire(true);
+      defined(MockIO.instances[3]).fire(true);
       await Promise.resolve();
     });
     const priorities = scheduleSpy.mock.calls.map((c) => c[1]);
@@ -202,7 +203,7 @@ describe('PR-5.0.95 landing-page lazy hydration', () => {
     await renderGroup(2);
     // Fire card 0's initial observer so it hydrates before close.
     await act(async () => {
-      MockIO.instances[0]!.fire(true);
+      defined(MockIO.instances[0]).fire(true);
       await Promise.resolve();
       await Promise.resolve();
     });
@@ -232,7 +233,7 @@ describe('PR-5.0.95 landing-page lazy hydration', () => {
     // last one to trigger card 1's fetch.
     const fetchCountBeforeRefire = windowFetchCount();
     await act(async () => {
-      MockIO.instances[MockIO.instances.length - 1]!.fire(true);
+      defined(MockIO.instances[MockIO.instances.length - 1]).fire(true);
       await Promise.resolve();
       await Promise.resolve();
     });
@@ -271,7 +272,7 @@ describe('PR-5.0.95 landing-page lazy hydration', () => {
       // Fire card 0's observer. Its `?n=100` task is queued behind the blockers
       // (all concurrency slots are taken); no fetch runs yet.
       await act(async () => {
-        MockIO.instances[0]!.fire(true);
+        defined(MockIO.instances[0]).fire(true);
         await Promise.resolve();
       });
       const scheduledAfterOpen = scheduleSpy.mock.calls.length;
@@ -290,7 +291,7 @@ describe('PR-5.0.95 landing-page lazy hydration', () => {
       await act(async () => {
         details.open = true;
         details.dispatchEvent(new Event('toggle'));
-        MockIO.instances[MockIO.instances.length - 1]!.fire(true);
+        defined(MockIO.instances[MockIO.instances.length - 1]).fire(true);
         await Promise.resolve();
       });
 
@@ -327,18 +328,18 @@ describe('PR-5.0.95 landing-page lazy hydration', () => {
     });
     await renderGroup(2);
     await act(async () => {
-      MockIO.instances[0]!.fire(true);
+      defined(MockIO.instances[0]).fire(true);
       await Promise.resolve();
     });
     expect(signals.length).toBe(1);
-    expect(signals[0]!.aborted).toBe(false);
+    expect(defined(signals[0]).aborted).toBe(false);
     const details = container.querySelector('details.group-disclosure') as HTMLDetailsElement;
     await act(async () => {
       details.open = false;
       details.dispatchEvent(new Event('toggle'));
       await Promise.resolve();
     });
-    expect(signals[0]!.aborted).toBe(true);
+    expect(defined(signals[0]).aborted).toBe(true);
     expect(MockIO.instances.every((io) => io.disconnected)).toBe(true);
   });
 });
@@ -446,12 +447,12 @@ describe('PR-5.0.97 group-bundle hydration', () => {
     });
     expect(bundleFetchCount()).toBe(1);
     await act(async () => {
-      MockIO.instances[0]!.fire(true);
+      defined(MockIO.instances[0]).fire(true);
       await Promise.resolve();
     });
     // Firing the IO disconnects it and drives construction (Chart.js load is a
     // parked stub here, so the observable construction signal is the disconnect).
-    expect(MockIO.instances[0]!.disconnected).toBe(true);
+    expect(defined(MockIO.instances[0]).disconnected).toBe(true);
     expect(chartFetchCount()).toBe(0);
   });
 
@@ -481,8 +482,8 @@ describe('PR-5.0.97 group-bundle hydration', () => {
       });
       await renderGroup(3);
       await act(async () => {
-        MockIO.instances[0]!.fire();
-        MockIO.instances[1]!.fire();
+        defined(MockIO.instances[0]).fire();
+        defined(MockIO.instances[1]).fire();
         await vi.advanceTimersByTimeAsync(FETCH_TIMEOUT_MS);
       });
       expect(container.querySelectorAll('[data-role="fetch-retry"]')).toHaveLength(2);
@@ -491,15 +492,15 @@ describe('PR-5.0.97 group-bundle hydration', () => {
 
       // A later card sees the same failure without starting another request.
       await act(async () => {
-        MockIO.instances[2]!.fire();
+        defined(MockIO.instances[2]).fire();
         await vi.advanceTimersByTimeAsync(FETCH_TIMEOUT_MS * 2);
       });
       expect(container.querySelectorAll('[data-role="fetch-retry"]')).toHaveLength(3);
       expect(bundleFetchCount()).toBe(1);
       const retries = container.querySelectorAll<HTMLButtonElement>('[data-role="fetch-retry"]');
       await act(async () => {
-        retries[0]!.click();
-        retries[1]!.click();
+        defined(retries[0]).click();
+        defined(retries[1]).click();
       });
       expect(bundleFetchCount()).toBe(2);
       expect(chartFetchCount()).toBe(0);
@@ -522,8 +523,8 @@ describe('PR-5.0.97 group-bundle hydration', () => {
     });
     await renderGroup(2);
     await act(async () => {
-      MockIO.instances[0]!.fire();
-      MockIO.instances[1]!.fire();
+      defined(MockIO.instances[0]).fire();
+      defined(MockIO.instances[1]).fire();
       await vi.advanceTimersByTimeAsync(0);
     });
     expect(bundleFetchCount()).toBe(1);
@@ -564,14 +565,14 @@ describe('PR-5.0.97 group-bundle hydration', () => {
       await Promise.resolve();
     });
     expect(signals.length).toBe(1);
-    expect(signals[0]!.aborted).toBe(false);
+    expect(defined(signals[0]).aborted).toBe(false);
     const details = container.querySelector('details.group-disclosure') as HTMLDetailsElement;
     await act(async () => {
       details.open = false;
       details.dispatchEvent(new Event('toggle'));
       await Promise.resolve();
     });
-    expect(signals[0]!.aborted).toBe(true);
+    expect(defined(signals[0]).aborted).toBe(true);
   });
 
   it('GroupBody mounts islands only while open; they share one bundle, and closing aborts it', async () => {
@@ -637,7 +638,7 @@ describe('PR-5.0.97 group-bundle hydration', () => {
     });
     // Closed: the islands are gone and the bundle is aborted.
     expect(container.querySelectorAll('.chart-card')).toHaveLength(0);
-    expect(signals[0]!.aborted).toBe(true);
+    expect(defined(signals[0]).aborted).toBe(true);
   });
 
   it('reopen AFTER the bundle succeeded issues ZERO new fetches (cache hit)', async () => {
@@ -688,8 +689,8 @@ describe('PR-5.0.97 group-bundle hydration', () => {
     // The per-chart fallback only fires once a card is intersected (construction
     // is IO-gated). Fire both observers; only `s1` (uncovered) must refetch.
     await act(async () => {
-      MockIO.instances[0]!.fire(true);
-      MockIO.instances[1]!.fire(true);
+      defined(MockIO.instances[0]).fire(true);
+      defined(MockIO.instances[1]).fire(true);
       await Promise.resolve();
       await Promise.resolve();
       await Promise.resolve();
@@ -715,9 +716,9 @@ describe('PR-5.0.97 group-bundle hydration', () => {
     expect(bundleFetchCount()).toBe(1);
     // Every card intersecting after the 404 falls back to its own per-chart fetch.
     await act(async () => {
-      MockIO.instances[0]!.fire(true);
-      MockIO.instances[1]!.fire(true);
-      MockIO.instances[2]!.fire(true);
+      defined(MockIO.instances[0]).fire(true);
+      defined(MockIO.instances[1]).fire(true);
+      defined(MockIO.instances[2]).fire(true);
       await Promise.resolve();
       await Promise.resolve();
       await Promise.resolve();
@@ -751,7 +752,7 @@ describe('PR-5.0.97 group-bundle hydration', () => {
     // Fire the card's observer so it calls `ensureInitialPayload` and begins
     // awaiting the still-pending bundle.
     await act(async () => {
-      MockIO.instances[0]!.fire(true);
+      defined(MockIO.instances[0]).fire(true);
       await Promise.resolve();
     });
     expect(bundleFetchCount()).toBe(1);
@@ -817,8 +818,8 @@ describe('PR-5.0.97 group-bundle hydration', () => {
     await renderGroup(2);
     // Let the eager bundle fetch settle as a 404, then let each island fall back.
     await act(async () => {
-      MockIO.instances[0]!.fire(true);
-      MockIO.instances[1]!.fire(true);
+      defined(MockIO.instances[0]).fire(true);
+      defined(MockIO.instances[1]).fire(true);
       await Promise.resolve();
       await Promise.resolve();
       await Promise.resolve();
diff --git a/src/bench/components/Chart.lifecycle.test.tsx b/src/bench/components/Chart.lifecycle.test.tsx
index 6eabe542..f387f560 100644
--- a/src/bench/components/Chart.lifecycle.test.tsx
+++ b/src/bench/components/Chart.lifecycle.test.tsx
@@ -9,6 +9,7 @@ import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest';
 
 import { Chart } from '@/bench/components/Chart';
 import { resetGroup, resetPayloadCache, setGroupY } from '@/bench/lib/chart-store';
+import { defined } from '@/lib/defined';
 
 // Chart.js never actually constructs in this suite; the loader resolves to a
 // throwing stub so any unexpected construction fails loudly. The lifecycle
@@ -105,7 +106,7 @@ describe('Chart island lifecycle (StrictMode effect replay)', () => {
     );
     expect(bundleFetches).toHaveLength(1);
     expect(signals).toHaveLength(1);
-    expect(signals[0]!.aborted).toBe(false);
+    expect(defined(signals[0]).aborted).toBe(false);
   });
 
   it('replays a pre-existing group-Y override on mount (store outlives mounts)', async () => {
diff --git a/src/bench/components/Chart.loading.test.tsx b/src/bench/components/Chart.loading.test.tsx
index 02101a8d..8772be24 100644
--- a/src/bench/components/Chart.loading.test.tsx
+++ b/src/bench/components/Chart.loading.test.tsx
@@ -12,6 +12,7 @@ import { FETCH_TIMEOUT_MS } from '@/bench/lib/chart-format';
 import { PAGE_LEAVE_GRACE_MS } from '@/bench/lib/page-leave';
 import { fullHistoryQueue } from '@/bench/lib/chart-store';
 import { loadChartJs } from '@/bench/lib/chart-js';
+import { defined } from '@/lib/defined';
 
 // Mock Chart.js construction to a NEVER-RESOLVING loader by default:
 // maybeConstruct awaits it forever and never reaches `new Chart(...)`, so the
@@ -396,7 +397,7 @@ describe('Chart opt-in full-history loading', () => {
       }
     });
     expect(charts).toHaveLength(1);
-    const stub = charts[0]!;
+    const stub = defined(charts[0]);
     expect(stub.options.plugins.tooltip.enabled).toBe(false);
     expect(stub.options.plugins.zoom.limits.x).toEqual({ min: 0, max: 19, minRange: 4 });
 
@@ -442,18 +443,18 @@ describe('Chart opt-in full-history loading', () => {
       const { signals } = stubAbortableWindowFetch();
       await renderOpenGroup();
       expect(signals.length).toBeGreaterThanOrEqual(1);
-      expect(signals[0]!.aborted).toBe(false);
+      expect(defined(signals[0]).aborted).toBe(false);
     });
 
     it('aborts a stalled window fetch at FETCH_TIMEOUT_MS and shows an error', async () => {
       vi.useFakeTimers();
       const { signals } = stubAbortableWindowFetch();
       await renderOpenGroup();
-      expect(signals[0]!.aborted).toBe(false);
+      expect(defined(signals[0]).aborted).toBe(false);
       await act(async () => {
         await vi.advanceTimersByTimeAsync(FETCH_TIMEOUT_MS);
       });
-      expect(signals[0]!.aborted).toBe(true);
+      expect(defined(signals[0]).aborted).toBe(true);
       const err = container.querySelector('.chart-error');
       expect(err).not.toBeNull();
       vi.useRealTimers();
@@ -462,12 +463,12 @@ describe('Chart opt-in full-history loading', () => {
     it('unmount (destroy) aborts an in-flight window fetch', async () => {
       const { signals } = stubAbortableWindowFetch();
       await renderOpenGroup();
-      expect(signals[0]!.aborted).toBe(false);
+      expect(defined(signals[0]).aborted).toBe(false);
       await act(async () => {
         root?.unmount();
         root = null;
       });
-      expect(signals[0]!.aborted).toBe(true);
+      expect(defined(signals[0]).aborted).toBe(true);
     });
 
     it('a close/destroy abort is silent (no error indicator)', async () => {
@@ -477,7 +478,7 @@ describe('Chart opt-in full-history loading', () => {
         root?.unmount();
         root = null;
       });
-      expect(signals[0]!.aborted).toBe(true);
+      expect(defined(signals[0]).aborted).toBe(true);
       // destroy sets disposed, so the rejected fetch must not paint an error.
       expect(container.querySelector('.chart-error')).toBeNull();
     });
@@ -521,14 +522,14 @@ describe('Chart opt-in full-history loading', () => {
         await Promise.resolve();
       });
       expect(signals.length).toBeGreaterThanOrEqual(1);
-      expect(signals[0]!.aborted).toBe(false);
+      expect(defined(signals[0]).aborted).toBe(false);
       // Unmounting destroys the controller; the per-fetch aborter is bridged
       // from the controller-lifetime aborter so it must fire immediately.
       await act(async () => {
         root?.unmount();
         root = null;
       });
-      expect(signals[0]!.aborted).toBe(true);
+      expect(defined(signals[0]).aborted).toBe(true);
     });
 
     it('a stalled full-history fetch times out and the chip offers retry', async () => {
@@ -551,7 +552,7 @@ describe('Chart opt-in full-history loading', () => {
       await act(async () => {
         await vi.advanceTimersByTimeAsync(FETCH_TIMEOUT_MS);
       });
-      expect(signals[0]!.aborted).toBe(true);
+      expect(defined(signals[0]).aborted).toBe(true);
       expect(chip?.dataset.state).toBe('error');
       expect(chip?.textContent).toBe('retry');
       vi.useRealTimers();
diff --git a/src/bench/components/FilterBar.test.tsx b/src/bench/components/FilterBar.test.tsx
index 41b2181d..e5829586 100644
--- a/src/bench/components/FilterBar.test.tsx
+++ b/src/bench/components/FilterBar.test.tsx
@@ -11,6 +11,7 @@ import { FilterBar } from '@/bench/components/FilterBar';
 import { parseFilterCsv, seriesPassesFilter } from '@/bench/lib/chart-format';
 import { getGlobalFilterSnapshot } from '@/bench/lib/chart-store';
 import { resetUrlWrites, URL_WRITE_DELAY_MS } from '@/bench/lib/url-writes';
+import { defined } from '@/lib/defined';
 
 /** Fake the write scheduler's timers and its clock, `performance.now()`. */
 function useFakeClock(): void {
@@ -53,9 +54,9 @@ describe('global filter URL round trips', () => {
 
   async function click(dim: string, value: string): Promise<void> {
     await act(async () => {
-      container
-        .querySelector<HTMLButtonElement>(`[data-filter="${dim}"][data-value="${value}"]`)!
-        .click();
+      defined(
+        container.querySelector<HTMLButtonElement>(`[data-filter="${dim}"][data-value="${value}"]`),
+      ).click();
     });
   }
 
diff --git a/src/bench/components/LandingState.test.tsx b/src/bench/components/LandingState.test.tsx
index e285f71b..6bf87b59 100644
--- a/src/bench/components/LandingState.test.tsx
+++ b/src/bench/components/LandingState.test.tsx
@@ -17,6 +17,7 @@ import {
   takeOpenGroupsBootstrap,
 } from '@/bench/lib/open-groups';
 import type { NavigationKind, SavedScroll } from '@/bench/lib/scroll-restore';
+import { defined } from '@/lib/defined';
 
 // Three groups in page order, as the landing page renders them.
 const GROUPS = [
@@ -335,7 +336,7 @@ describe('LandingState', () => {
       // 123 toggles, 50 ms apart, as a visitor holding Enter makes; each group
       // is toggled an odd number of times, so ends open.
       for (let i = 0; i < 123; i++) {
-        const { anchor } = GROUPS[i % 3]!;
+        const { anchor } = defined(GROUPS[i % 3]);
         await toggle(anchor, !disclosure(anchor).open);
         act(() => {
           vi.advanceTimersByTime(50);
@@ -628,7 +629,7 @@ describe('LandingState', () => {
           'bench-scroll:/',
           JSON.stringify({ kind: 'group', slug: 'qm.click', offset: 40 }),
         );
-        place(document.getElementById('clickbench')!, 900);
+        place(defined(document.getElementById('clickbench')), 900);
         window.history.scrollRestoration = 'auto';
         await mount('/');
         await nextFrame();
@@ -645,7 +646,7 @@ describe('LandingState', () => {
         'bench-scroll:/',
         JSON.stringify({ kind: 'group', slug: 'qm.click', offset: 40 }),
       );
-      place(document.getElementById('clickbench')!, 900);
+      place(defined(document.getElementById('clickbench')), 900);
       window.history.scrollRestoration = 'manual';
       await mount('/');
       await nextFrame();
diff --git a/src/bench/components/OpenGroupsScript.test.tsx b/src/bench/components/OpenGroupsScript.test.tsx
index 4a301d20..25bd9450 100644
--- a/src/bench/components/OpenGroupsScript.test.tsx
+++ b/src/bench/components/OpenGroupsScript.test.tsx
@@ -24,6 +24,7 @@ import {
   takeOpenGroupsBootstrap,
 } from '@/bench/lib/open-groups';
 import { USER_INPUT } from '@/bench/lib/scroll-restore';
+import { defined } from '@/lib/defined';
 
 const UNIVERSE: FilterUniverse = { engines: ['duckdb'], formats: ['parquet', 'vortex'] };
 const NAMES = ['TPC-H (NVMe) (SF=1)', 'Random Access', 'Clickbench'];
@@ -34,8 +35,8 @@ const ANCHORS = groupAnchors(NAMES);
 const SECTIONS = NAMES.map((name, i) => (
   <GroupSection
     key={SLUGS[i]}
-    group={{ name, slug: SLUGS[i]!, charts: [{ name: 'q1', slug: `${SLUGS[i]}.q1` }] }}
-    anchor={ANCHORS[i]!}
+    group={{ name, slug: defined(SLUGS[i]), charts: [{ name: 'q1', slug: `${SLUGS[i]}.q1` }] }}
+    anchor={defined(ANCHORS[i])}
     startIndex={i}
     universe={UNIVERSE}
   />
@@ -307,17 +308,17 @@ describe('OpenGroupsScript', () => {
 
     it('opens a listed group as soon as it is parsed, before the later groups arrive', async () => {
       const page = stream('#random-access');
-      page.append(SECTION_HTML[0]!);
+      page.append(defined(SECTION_HTML[0]));
       await page.settle();
       expect(openAnchors(page.doc)).toEqual([]);
 
-      page.append(SECTION_HTML[1]!);
+      page.append(defined(SECTION_HTML[1]));
       await page.settle();
       expect(openAnchors(page.doc)).toEqual(['random-access']);
       // The marker waits for the finish step.
       expect((page.doc as unknown as Record<string, unknown>).__benchOpenGroups).toBeUndefined();
 
-      page.append(SECTION_HTML[2]!);
+      page.append(defined(SECTION_HTML[2]));
       page.finish();
       expect(openAnchors(page.doc)).toEqual(['random-access']);
       expect(takeOpenGroupsBootstrap(page.doc)).toEqual({ input: false });
@@ -341,7 +342,7 @@ describe('OpenGroupsScript', () => {
 
     it('keeps closed a listed group the reader closed before the last group arrived', async () => {
       const page = stream('#tpc-h-nvme-sf-1,clickbench');
-      page.append(SECTION_HTML[0]!);
+      page.append(defined(SECTION_HTML[0]));
       await page.settle();
       expect(openAnchors(page.doc)).toEqual(['tpc-h-nvme-sf-1']);
 
@@ -350,7 +351,7 @@ describe('OpenGroupsScript', () => {
         throw new Error('no disclosure');
       }
       first.open = false;
-      page.append(SECTION_HTML[1]! + SECTION_HTML[2]!);
+      page.append(defined(SECTION_HTML[1]) + defined(SECTION_HTML[2]));
       await page.settle();
       page.finish();
       expect(openAnchors(page.doc)).toEqual(['clickbench']);
@@ -370,9 +371,9 @@ describe('OpenGroupsScript', () => {
 
     it('records input from before the last group arrived', () => {
       const page = stream('#clickbench');
-      page.append(SECTION_HTML[0]!);
+      page.append(defined(SECTION_HTML[0]));
       page.window.dispatchEvent(new page.window.Event('keydown'));
-      page.append(SECTION_HTML[1]! + SECTION_HTML[2]!);
+      page.append(defined(SECTION_HTML[1]) + defined(SECTION_HTML[2]));
       page.finish();
       expect(takeOpenGroupsBootstrap(page.doc)).toEqual({ input: true });
     });
diff --git a/src/bench/components/chart/config.ts b/src/bench/components/chart/config.ts
index 295bd79c..5482c39b 100644
--- a/src/bench/components/chart/config.ts
+++ b/src/bench/components/chart/config.ts
@@ -32,9 +32,9 @@ const crosshairPlugin: Plugin<'line'> = {
     if (!active || active.length === 0) {
       return;
     }
-    const x = active[0]!.element.x;
+    const x = active[0]?.element.x;
     const ya = chart.scales?.y;
-    if (!ya || !Number.isFinite(x)) {
+    if (!ya || x === undefined || !Number.isFinite(x)) {
       return;
     }
     const ctx = chart.ctx;
@@ -121,10 +121,11 @@ export function lineChartConfig(input: {
           { intersect: false, axis: 'x' },
           true,
         );
-        if (points.length === 0) {
+        const index = points[0]?.index;
+        if (index === undefined) {
           return;
         }
-        const commit = state.payload?.commits?.[points[0]!.index];
+        const commit = state.payload?.commits?.[index];
         if (!commit) {
           return;
         }
diff --git a/src/bench/lib/cache-fill.test.ts b/src/bench/lib/cache-fill.test.ts
index c33dcb5a..6efbfc0d 100644
--- a/src/bench/lib/cache-fill.test.ts
+++ b/src/bench/lib/cache-fill.test.ts
@@ -23,6 +23,7 @@ import {
   retryGroupCacheFill,
   withGroupCacheFillLock,
 } from '@/bench/lib/cache-fill';
+import { defined } from '@/lib/defined';
 
 /** A fill that runs until the test settles it. */
 function deferredFill(value: string): {
@@ -64,11 +65,11 @@ describe('group cache fill lock', () => {
     await expect(withGroupCacheFillLock('groups', fill)).resolves.toBe('groups');
 
     expect(fill).toHaveBeenCalledOnce();
-    expect(query.mock.calls[0]![0]).toContain('pg_try_advisory_lock');
-    expect(query.mock.calls[1]![0]).toContain('pg_advisory_unlock');
-    expect(query.mock.calls[0]![1]).toEqual(query.mock.calls[1]![1]);
+    expect(defined(query.mock.calls[0])[0]).toContain('pg_try_advisory_lock');
+    expect(defined(query.mock.calls[1])[0]).toContain('pg_advisory_unlock');
+    expect(defined(query.mock.calls[0])[1]).toEqual(defined(query.mock.calls[1])[1]);
     expect(release).toHaveBeenCalledOnce();
-    expect(release.mock.calls[0]![0]).toBeUndefined();
+    expect(defined(release.mock.calls[0])[0]).toBeUndefined();
     expect(client.listenerCount('error')).toBe(0);
   });
 
@@ -78,8 +79,8 @@ describe('group cache fill lock', () => {
     await withGroupCacheFillLock('group-charts:a', async () => 'a');
     await withGroupCacheFillLock('group-charts:b', async () => 'b');
 
-    const lockA = query.mock.calls[0]![1];
-    const lockB = query.mock.calls[2]![1];
+    const lockA = defined(query.mock.calls[0])[1];
+    const lockB = defined(query.mock.calls[2])[1];
     expect(lockA).toEqual([0x62656e63, cacheFillLockId('group-charts:a')]);
     expect(lockB).toEqual([0x62656e63, cacheFillLockId('group-charts:b')]);
     expect(lockA).not.toEqual(lockB);
@@ -108,7 +109,7 @@ describe('group cache fill lock', () => {
       }),
     ).rejects.toBe(failure);
 
-    expect(query.mock.calls[1]![0]).toContain('pg_advisory_unlock');
+    expect(defined(query.mock.calls[1])[0]).toContain('pg_advisory_unlock');
     expect(release).toHaveBeenCalledOnce();
   });
 
@@ -180,14 +181,14 @@ describe('group cache fills in one process', () => {
     await settle();
     // The third waits for a slot without taking a connection.
     expect(connect).toHaveBeenCalledTimes(2);
-    expect(fills[2]!.fill).not.toHaveBeenCalled();
+    expect(defined(fills[2]).fill).not.toHaveBeenCalled();
 
-    fills[0]!.finish();
+    defined(fills[0]).finish();
     await settle();
     expect(connect).toHaveBeenCalledTimes(3);
 
-    fills[1]!.finish();
-    fills[2]!.finish();
+    defined(fills[1]).finish();
+    defined(fills[2]).finish();
     await expect(Promise.all(results)).resolves.toEqual(['a', 'b', 'c']);
   });
 
diff --git a/src/bench/lib/cache-fill.ts b/src/bench/lib/cache-fill.ts
index 3fbc024b..4706ef3a 100644
--- a/src/bench/lib/cache-fill.ts
+++ b/src/bench/lib/cache-fill.ts
@@ -58,13 +58,14 @@ const slotWaiters: { exclusive: boolean; grant: (slots: number) => void }[] = []
 // running fills to finish, and no later fill passes it.
 function grantSlots(): void {
   const capacity = cacheFillSlots();
-  while (slotWaiters.length > 0) {
-    const slots = slotWaiters[0]!.exclusive ? capacity : 1;
+  for (let head = slotWaiters[0]; head; head = slotWaiters[0]) {
+    const slots = head.exclusive ? capacity : 1;
     if (usedSlots + slots > capacity) {
       return;
     }
     usedSlots += slots;
-    slotWaiters.shift()!.grant(slots);
+    slotWaiters.shift();
+    head.grant(slots);
   }
 }
 
diff --git a/src/bench/lib/chart-format.test.ts b/src/bench/lib/chart-format.test.ts
index a1124c39..d92c6248 100644
--- a/src/bench/lib/chart-format.test.ts
+++ b/src/bench/lib/chart-format.test.ts
@@ -49,6 +49,7 @@ import {
   visibleRange,
 } from './chart-format';
 import type { ChartResponse, CommitPoint } from './queries';
+import { defined } from '@/lib/defined';
 
 function commit(sha: string): CommitPoint {
   return {
@@ -252,7 +253,9 @@ function seen(hex: string, vision: Vision): Lab {
   const m = MACHADO[vision];
   const clamp = (v: number): number => Math.min(1, Math.max(0, v));
   return labOf(
-    m.map((row) => clamp(row[0]! * rgb[0] + row[1]! * rgb[1] + row[2]! * rgb[2])) as Rgb,
+    m.map((row) =>
+      clamp(defined(row[0]) * rgb[0] + defined(row[1]) * rgb[1] + defined(row[2]) * rgb[2]),
+    ) as Rgb,
   );
 }
 
@@ -692,7 +695,7 @@ describe('lttbIndices', () => {
     expect(kept).toContain(50);
     // Indices are strictly increasing.
     for (let i = 1; i < kept.length; i++) {
-      expect(kept[i]).toBeGreaterThan(kept[i - 1]!);
+      expect(kept[i]).toBeGreaterThan(defined(kept[i - 1]));
     }
   });
 });
diff --git a/src/bench/lib/chart-format.ts b/src/bench/lib/chart-format.ts
index 41ff6c3d..08b70886 100644
--- a/src/bench/lib/chart-format.ts
+++ b/src/bench/lib/chart-format.ts
@@ -214,6 +214,11 @@ const FORMAT_ORDER_FALLBACK = 6;
 /** Engine draw priority within a format: datafusion is layered ahead of duckdb. */
 const ENGINE_ORDER: Record<string, number> = { datafusion: 0, duckdb: 1 };
 
+/** The table's own rank for `key`, or `fallback` when the table has none. */
+function rankIn(table: Record<string, number>, key: string | undefined, fallback: number): number {
+  return (key !== undefined && Object.hasOwn(table, key) ? table[key] : undefined) ?? fallback;
+}
+
 /**
  * The Chart.js `order` for a series (lower renders on top). Series are layered by
  * format importance first -- Vortex in front, then Parquet, vortex-compact, the
@@ -226,9 +231,8 @@ export function seriesOrder(
   meta: { engine?: string; format?: string } | null | undefined,
 ): number {
   const { engine, format } = seriesDims(name, meta);
-  const formatRank =
-    format && format in FORMAT_ORDER ? FORMAT_ORDER[format]! : FORMAT_ORDER_FALLBACK;
-  const engineRank = engine && engine in ENGINE_ORDER ? ENGINE_ORDER[engine]! : 0;
+  const formatRank = rankIn(FORMAT_ORDER, format, FORMAT_ORDER_FALLBACK);
+  const engineRank = rankIn(ENGINE_ORDER, engine, 0);
   return formatRank * 10 + engineRank;
 }
 
@@ -298,7 +302,7 @@ export function parsePrNumber(message: unknown): string | null {
     return null;
   }
   const m = message.match(/\(#(\d+)\)/);
-  return m ? m[1]! : null;
+  return m?.[1] ?? null;
 }
 
 /**
@@ -468,7 +472,8 @@ export function magnitudeReference(values: readonly (number | null | undefined)[
   }
   sample.sort((a, b) => a - b);
   const mid = Math.floor(sample.length / 2);
-  return sample.length % 2 ? sample[mid]! : (sample[mid - 1]! + sample[mid]!) / 2;
+  const upper = sample[mid] ?? 0;
+  return sample.length % 2 ? upper : ((sample[mid - 1] ?? upper) + upper) / 2;
 }
 
 /**
@@ -735,8 +740,8 @@ export function lttbIndices(
     let ax = 0;
     let ay = 0;
     for (let j = nextStart; j < nextEnd; j++) {
-      ax += xs[j]!;
-      ay += ys[j]!;
+      ax += xs[j] ?? 0;
+      ay += ys[j] ?? 0;
     }
     ax /= count;
     ay /= count;
@@ -745,12 +750,13 @@ export function lttbIndices(
     // `(a, avg_next)`.
     const rangeStart = Math.floor(bi * bucket) + 1;
     const rangeEnd = Math.floor((bi + 1) * bucket) + 1;
-    const pax = xs[a]!;
-    const pay = ys[a]!;
+    const pax = xs[a] ?? 0;
+    const pay = ys[a] ?? 0;
     let maxArea = -1;
     let maxIdx = rangeStart;
     for (let k = rangeStart; k < rangeEnd; k++) {
-      const area = Math.abs((pax - ax) * (ys[k]! - pay) - (pax - xs[k]!) * (ay - pay)) * 0.5;
+      const area =
+        Math.abs((pax - ax) * ((ys[k] ?? 0) - pay) - (pax - (xs[k] ?? 0)) * (ay - pay)) * 0.5;
       if (area > maxArea) {
         maxArea = area;
         maxIdx = k;
@@ -824,7 +830,10 @@ export function decimateSeries(
   const budget = Math.max(2, Math.floor(maxPoints / perSeries.length));
   for (const series of perSeries) {
     for (const local of lttbIndices(series.idxs, series.vals, budget)) {
-      kept.add(series.idxs[local]!);
+      const idx = series.idxs[local];
+      if (idx !== undefined) {
+        kept.add(idx);
+      }
     }
   }
   return { kept, downsampled: true };
@@ -893,8 +902,11 @@ export function normalizeChartPayload(payload: ChartResponse): NormalizedChartPa
   const total = history.total_commits;
   const start = history.start_index;
   const normalizedCommits = new Array<CommitPoint | null>(total).fill(null);
-  for (let ci = 0; ci < commits.length && start + ci < total; ci++) {
-    normalizedCommits[start + ci] = commits[ci]!;
+  for (const [ci, commit] of commits.entries()) {
+    if (start + ci >= total) {
+      break;
+    }
+    normalizedCommits[start + ci] = commit;
   }
 
   const rawSeries = payload.series ?? {};
diff --git a/src/bench/lib/data-cache.test.ts b/src/bench/lib/data-cache.test.ts
index cda7e379..8a063e1b 100644
--- a/src/bench/lib/data-cache.test.ts
+++ b/src/bench/lib/data-cache.test.ts
@@ -56,6 +56,7 @@ import {
   cachedFilterUniverse,
   cachedGroups,
 } from '@/bench/lib/data-cache';
+import { defined } from '@/lib/defined';
 
 afterEach(() => {
   cacheCalls.length = 0;
@@ -90,17 +91,17 @@ describe('data-cache wrappers', () => {
   it('locks each group bundle on its own key, and the group list on every fill slot', async () => {
     await cachedGroups();
     await cachedDefaultGroupCharts('gs');
-    expect(withGroupCacheFillLock.mock.calls[0]![0]).toBe('groups');
-    expect(withGroupCacheFillLock.mock.calls[0]![2]).toEqual({ exclusive: true });
-    expect(withGroupCacheFillLock.mock.calls[1]![0]).toBe('group-charts:gs');
-    expect(withGroupCacheFillLock.mock.calls[1]![2]).toBeUndefined();
+    expect(defined(withGroupCacheFillLock.mock.calls[0])[0]).toBe('groups');
+    expect(defined(withGroupCacheFillLock.mock.calls[0])[2]).toEqual({ exclusive: true });
+    expect(defined(withGroupCacheFillLock.mock.calls[1])[0]).toBe('group-charts:gs');
+    expect(defined(withGroupCacheFillLock.mock.calls[1])[2]).toBeUndefined();
   });
 
   it('reads and fills an aliased slug under its canonical slug', async () => {
     const { collectGroupCharts, chartPayload } = await import('@/bench/lib/queries');
     await cachedDefaultGroupCharts('gs-alias');
     await cachedDefaultChartPayload('cs-alias');
-    expect(withGroupCacheFillLock.mock.calls[0]![0]).toBe('group-charts:gs');
+    expect(defined(withGroupCacheFillLock.mock.calls[0])[0]).toBe('group-charts:gs');
     expect(vi.mocked(collectGroupCharts)).toHaveBeenLastCalledWith(
       { slug: 'gs' },
       expect.anything(),
diff --git a/src/bench/lib/group-charts.test.ts b/src/bench/lib/group-charts.test.ts
index ac6a3f97..820ce302 100644
--- a/src/bench/lib/group-charts.test.ts
+++ b/src/bench/lib/group-charts.test.ts
@@ -25,6 +25,7 @@ import {
   TREE_SHA,
 } from './test-harness';
 import { type CommitWindow, parseCommitWindow } from './window';
+import { defined } from '@/lib/defined';
 
 describe('historyFor', () => {
   it('bounds a long history to the window', () => {
@@ -117,7 +118,7 @@ async function statementsOf<T>(
   const clients = new Set(clientQuery.mock.contexts as Client[]);
   expect(clients.size).toBe(1);
   // Only the pool's own idle listener is left on the released client.
-  expect([...clients][0]!.listenerCount('error')).toBe(1);
+  expect(defined([...clients][0]).listenerCount('error')).toBe(1);
   expect(texts[0]).toBe('BEGIN ISOLATION LEVEL REPEATABLE READ, READ ONLY');
   expect(texts.at(-1)).toBe('COMMIT');
   clientQuery.mockRestore();
@@ -580,7 +581,7 @@ describe.skipIf(!databaseAvailable)('groupChartPayloads at the window edges', ()
 
   it('gives each random-access and vector-search chart its own window', async () => {
     const window = commitWindow('4');
-    const [ra, rb] = await groupChartPayloads(...OTHER_FAMILIES[0]!, window);
+    const [ra, rb] = await groupChartPayloads(...defined(OTHER_FAMILIES[0]), window);
     expect(ra?.history).toEqual({
       total_commits: 6,
       start_index: 2,
@@ -595,7 +596,7 @@ describe.skipIf(!databaseAvailable)('groupChartPayloads at the window edges', ()
     });
     expect(rb?.commits.map((c) => c.sha)).toEqual([D, E, F]);
     expect(rb?.series).toEqual({ 'f1:hot': [null, 51, 52] });
-    const [, tenth, short] = await groupChartPayloads(...OTHER_FAMILIES[1]!, window);
+    const [, tenth, short] = await groupChartPayloads(...defined(OTHER_FAMILIES[1]), window);
     expect(tenth?.history).toEqual({
       total_commits: 4,
       start_index: 0,
diff --git a/src/bench/lib/groups.test.ts b/src/bench/lib/groups.test.ts
index 6bcd0674..bf2d6661 100644
--- a/src/bench/lib/groups.test.ts
+++ b/src/bench/lib/groups.test.ts
@@ -40,6 +40,7 @@ import { getPool, resetPool } from './db';
 import { cacheFillSlots, withGroupCacheFillLock } from './cache-fill';
 import { GET as getGroups } from '@/app/(bench)/bench/api/groups/route';
 import { GET as getGroup } from '@/app/(bench)/bench/api/group/[slug]/route';
+import { defined } from '@/lib/defined';
 
 function expectDefined<T>(value: T | null | undefined, message: string): T {
   if (value === null || value === undefined) {
@@ -100,9 +101,9 @@ describe.skipIf(!databaseAvailable)(
       if (summary.type !== 'randomAccess') {
         throw new Error(`expected randomAccess summary, got ${summary.type}`);
       }
-      expect(summary.hotRankings[0]!.name).toBe('vortex-file-compressed');
-      expect(summary.hotRankings[1]!.name).toBe('parquet');
-      expect(summary.hotRankings[2]!.name).toBe('arrow-ipc');
+      expect(defined(summary.hotRankings[0]).name).toBe('vortex-file-compressed');
+      expect(defined(summary.hotRankings[1]).name).toBe('parquet');
+      expect(defined(summary.hotRankings[2]).name).toBe('arrow-ipc');
       expect(summary.coldRankings.map((r) => r.name)).toEqual([
         'vortex-file-compressed',
         'parquet',
@@ -110,12 +111,12 @@ describe.skipIf(!databaseAvailable)(
       ]);
       // The fixture's newest commit has vortex=100_500 and parquet=201_000 on
       // the one `taxi` chart. Arrow IPC is 301_500 on the same chart.
-      expect(summary.hotRankings[0]!.score).toBeCloseTo(1.0, 6);
-      expect(summary.hotRankings[1]!.score).toBeCloseTo(1.9999005, 6);
-      expect(summary.hotRankings[2]!.score).toBeCloseTo(2.999801, 6);
-      expect(summary.hotRankings[0]!.totalRuntime).toBeCloseTo(100_500, 6);
-      expect(summary.hotRankings[1]!.totalRuntime).toBeCloseTo(201_000, 6);
-      expect(summary.hotRankings[2]!.totalRuntime).toBeCloseTo(301_500, 6);
+      expect(defined(summary.hotRankings[0]).score).toBeCloseTo(1.0, 6);
+      expect(defined(summary.hotRankings[1]).score).toBeCloseTo(1.9999005, 6);
+      expect(defined(summary.hotRankings[2]).score).toBeCloseTo(2.999801, 6);
+      expect(defined(summary.hotRankings[0]).totalRuntime).toBeCloseTo(100_500, 6);
+      expect(defined(summary.hotRankings[1]).totalRuntime).toBeCloseTo(201_000, 6);
+      expect(defined(summary.hotRankings[2]).totalRuntime).toBeCloseTo(301_500, 6);
       expect(summary.hotRankings.map((r) => [r.measured, r.total])).toEqual([
         [1, 1],
         [1, 1],
@@ -134,9 +135,9 @@ describe.skipIf(!databaseAvailable)(
       }
       expect(summary.title).toBe('Vector Search Performance');
       expect(summary.rankings.map((r) => r.name)).toEqual(['vortex-turboquant']);
-      expect(summary.rankings[0]!.score).toBeCloseTo(1.0, 6);
+      expect(defined(summary.rankings[0]).score).toBeCloseTo(1.0, 6);
       // The newest commit's value for the group's single threshold.
-      expect(summary.rankings[0]!.totalRuntime).toBeCloseTo(107_000, 6);
+      expect(defined(summary.rankings[0]).totalRuntime).toBeCloseTo(107_000, 6);
     });
 
     it('computes compression rankings with Parquet and Lance baselines', async () => {
@@ -208,9 +209,9 @@ describe.skipIf(!databaseAvailable)(
       if (summary.type !== 'queryBenchmark') {
         throw new Error(`expected queryBenchmark summary, got ${summary.type}`);
       }
-      expect(summary.rankings[0]!.name).toBe('datafusion:vortex-file-compressed');
-      expect(summary.rankings[1]!.name).toBe('duckdb:parquet');
-      expect(summary.rankings[0]!.score).toBeLessThan(summary.rankings[1]!.score);
+      expect(defined(summary.rankings[0]).name).toBe('datafusion:vortex-file-compressed');
+      expect(defined(summary.rankings[1]).name).toBe('duckdb:parquet');
+      expect(defined(summary.rankings[0]).score).toBeLessThan(defined(summary.rankings[1]).score);
       // Exact geomean scores pin the penalty model (not just the ordering). At the
       // latest commit datafusion has Q1=1_100_000, Q2=700_000 and duckdb has only
       // Q1=900_000; bestByQuery is {Q1: 900_000, Q2: 700_000}. datafusion scores
@@ -218,10 +219,10 @@ describe.skipIf(!databaseAvailable)(
       // missing Q2 so it takes the penalty max(900_000,300_000)*2 = 1_800_000,
       // scoring sqrt(1 * (10+1_800_000)/(10+700_000)) = sqrt(1800010/700010). The
       // penalty is what pushes duckdb (best raw Q1) below datafusion.
-      expect(summary.rankings[0]!.score).toBeCloseTo(1.10554, 5);
-      expect(summary.rankings[1]!.score).toBeCloseTo(1.60356, 5);
+      expect(defined(summary.rankings[0]).score).toBeCloseTo(1.10554, 5);
+      expect(defined(summary.rankings[1]).score).toBeCloseTo(1.60356, 5);
       // datafusion series has Q1 + Q2; duckdb series has Q1 only.
-      expect(summary.rankings[0]!.totalRuntime).toBeCloseTo(1_800_000, 6);
+      expect(defined(summary.rankings[0]).totalRuntime).toBeCloseTo(1_800_000, 6);
       expect(JSON.stringify(summary)).toContain('"totalRuntime"');
     });
 
@@ -275,7 +276,7 @@ describe.skipIf(!databaseAvailable)(
         'TPC-H benchmark queries on local NVMe storage at SF=1 (~1GB of data)',
       );
       expect(group.charts.map((c) => c.name)).toEqual(['Q1', 'Q2']);
-      const q1 = group.charts[0]!;
+      const q1 = defined(group.charts[0]);
       // The chart link's slug round-trips to the same `/api/chart` slug.
       expect(q1.slug).toBe(
         chartKeyToSlug({
@@ -359,7 +360,7 @@ describe.skipIf(!databaseAvailable)(
         ),
         'cached-only random access group',
       );
-      expect(Object.keys(group.charts[0]!.series).sort()).toEqual([
+      expect(Object.keys(defined(group.charts[0]).series).sort()).toEqual([
         'arrow-ipc:hot',
         'parquet:hot',
         'vortex-file-compressed:hot',
@@ -499,8 +500,11 @@ describe.skipIf(!databaseAvailable)('summary math fidelity (testcontainers Postg
     for (const [index, storage] of (['nvme', 's3'] as const).entries()) {
       const datasets =
         storage === 'nvme' ? ['taxi', 'taxi/uniform'] : ['taxi-s3', 'taxi-s3/uniform'];
-      expect(groupKeyFromSlug(groups[index]!.slug)).toEqual({ k: 'RandomAccessGroup', storage });
-      expect(groups[index]!.charts).toEqual(
+      expect(groupKeyFromSlug(defined(groups[index]).slug)).toEqual({
+        k: 'RandomAccessGroup',
+        storage,
+      });
+      expect(defined(groups[index]).charts).toEqual(
         datasets.map((dataset) => ({
           name: dataset,
           slug: chartKeyToSlug({ k: 'RandomAccess', dataset }),
@@ -567,22 +571,24 @@ describe.skipIf(!databaseAvailable)('summary math fidelity (testcontainers Postg
       'String Encoding Size',
     ]);
     const byName = new Map(groups.map((group) => [group.name, group]));
-    expect(groupKeyFromSlug(byName.get('Compression')!.slug)).toEqual({
+    expect(groupKeyFromSlug(defined(byName.get('Compression')).slug)).toEqual({
       k: 'CompressionTimeGroup',
     });
-    expect(byName.get('Compression')!.charts.map((chart) => chart.name)).toEqual(['tpch-lineitem']);
-    expect(byName.get('Compression')!.summary).toMatchObject({
+    expect(defined(byName.get('Compression')).charts.map((chart) => chart.name)).toEqual([
+      'tpch-lineitem',
+    ]);
+    expect(defined(byName.get('Compression')).summary).toMatchObject({
       type: 'compression',
       rankings: [
         { name: 'vortex-file-compressed', operation: 'encode', ratio: 2 },
         { name: 'parquet', operation: 'encode', ratio: 1 },
       ],
     });
-    expect(groupKeyFromSlug(byName.get('String Encoding')!.slug)).toEqual({
+    expect(groupKeyFromSlug(defined(byName.get('String Encoding')).slug)).toEqual({
       k: 'CompressionTimeGroup',
       suite: 'strings',
     });
-    expect(byName.get('String Encoding')!.charts).toEqual(
+    expect(defined(byName.get('String Encoding')).charts).toEqual(
       ['fsst', 'onpair-12'].map((encoder) => ({
         name: `fineweb/text/${encoder}`,
         slug: chartKeyToSlug({
@@ -592,7 +598,7 @@ describe.skipIf(!databaseAvailable)('summary math fidelity (testcontainers Postg
         }),
       })),
     );
-    expect(byName.get('String Encoding')!.summary).toMatchObject({
+    expect(defined(byName.get('String Encoding')).summary).toMatchObject({
       type: 'compression',
       rankings: [
         { name: 'onpair-12', operation: 'encode', ratio: 2, throughputGbS: 6 },
@@ -601,7 +607,7 @@ describe.skipIf(!databaseAvailable)('summary math fidelity (testcontainers Postg
         { name: 'fsst', operation: 'decode', ratio: 1, throughputGbS: 12 },
       ],
     });
-    expect(byName.get('String Encoding Size')!.summary).toMatchObject({
+    expect(defined(byName.get('String Encoding Size')).summary).toMatchObject({
       type: 'compressionSize',
       baseline: 'FSST',
       rankings: [
@@ -649,9 +655,12 @@ describe.skipIf(!databaseAvailable)('summary math fidelity (testcontainers Postg
     }
     expect(summary.hotRankings.map((r) => r.name)).toEqual(['vortex-file-compressed', 'lance']);
     // vortex: cbrt(1100000/350000 * 1 * 1); lance: cbrt(1 * 3 * 3).
-    expect(summary.hotRankings[0]!.score).toBeCloseTo(Math.cbrt(1_100_010 / 350_010), 5);
-    expect(summary.hotRankings[1]!.score).toBeCloseTo(Math.cbrt((3_000_010 / 1_000_010) ** 2), 5);
-    expect(summary.hotRankings[0]!.totalRuntime).toBeCloseTo(3_100_000 / 3, 6);
+    expect(defined(summary.hotRankings[0]).score).toBeCloseTo(Math.cbrt(1_100_010 / 350_010), 5);
+    expect(defined(summary.hotRankings[1]).score).toBeCloseTo(
+      Math.cbrt((3_000_010 / 1_000_010) ** 2),
+      5,
+    );
+    expect(defined(summary.hotRankings[0]).totalRuntime).toBeCloseTo(3_100_000 / 3, 6);
   });
 
   it('keeps an intermittently benchmarked format at its own latest run', async () => {
@@ -748,9 +757,12 @@ describe.skipIf(!databaseAvailable)('summary math fidelity (testcontainers Postg
       throw new Error(`expected vectorSearch summary, got ${summary.type}`);
     }
     expect(summary.rankings.map((r) => r.name)).toEqual(['vortex-turboquant', 'vortex-flat']);
-    expect(summary.rankings[0]!.score).toBeCloseTo(1.0, 6);
+    expect(defined(summary.rankings[0]).score).toBeCloseTo(1.0, 6);
     // sqrt((2010/1010) * (8010/2010)).
-    expect(summary.rankings[1]!.score).toBeCloseTo(Math.sqrt((2010 / 1010) * (8010 / 2010)), 6);
+    expect(defined(summary.rankings[1]).score).toBeCloseTo(
+      Math.sqrt((2010 / 1010) * (8010 / 2010)),
+      6,
+    );
   });
 
   it('keeps a sub-second latest commit timestamp (no whole-second truncation)', async () => {
@@ -789,8 +801,8 @@ describe.skipIf(!databaseAvailable)('summary math fidelity (testcontainers Postg
       'vortex-file-compressed',
       'parquet',
     ]);
-    expect(size.rankings[0]!.ratio).toBeCloseTo(0.25, 6);
-    expect(size.rankings[1]!.ratio).toBeCloseTo(1.0, 6);
+    expect(defined(size.rankings[0]).ratio).toBeCloseTo(0.25, 6);
+    expect(defined(size.rankings[1]).ratio).toBeCloseTo(1.0, 6);
   });
 
   it('leaves the wide-table and sparse-wide datasets out of the compression summaries', async () => {
@@ -900,7 +912,7 @@ describe.skipIf(!databaseAvailable)('summary math fidelity (testcontainers Postg
       'encode:vortex-file-compressed',
       'encode:parquet',
     ]);
-    expect(summary.rankings[0]!.ratio).toBeCloseTo(3.0, 6);
+    expect(defined(summary.rankings[0]).ratio).toBeCloseTo(3.0, 6);
   });
 
   it('falls back to the latest decode timestamp when there is no encode pair', async () => {
@@ -919,7 +931,7 @@ describe.skipIf(!databaseAvailable)('summary math fidelity (testcontainers Postg
       'decode:vortex-file-compressed',
       'decode:parquet',
     ]);
-    expect(summary.rankings[0]!.ratio).toBeCloseTo(2.0, 6);
+    expect(defined(summary.rankings[0]).ratio).toBeCloseTo(2.0, 6);
   });
 
   it('applies the 300_000 penalty floor so a missing query flips the ranking', async () => {
@@ -955,8 +967,8 @@ describe.skipIf(!databaseAvailable)('summary math fidelity (testcontainers Postg
       'datafusion:vortex-file-compressed',
       'duckdb:parquet',
     ]);
-    expect(summary.rankings[0]!.score).toBeCloseTo(1.414143, 5);
-    expect(summary.rankings[1]!.score).toBeCloseTo(1.732022, 5);
+    expect(defined(summary.rankings[0]).score).toBeCloseTo(1.414143, 5);
+    expect(defined(summary.rankings[1]).score).toBeCloseTo(1.732022, 5);
   });
 
   // A cached fill holds one connection for its advisory lock. The group-list fill then runs the
diff --git a/src/bench/lib/open-groups.test.ts b/src/bench/lib/open-groups.test.ts
index 486a0ad4..0238dc32 100644
--- a/src/bench/lib/open-groups.test.ts
+++ b/src/bench/lib/open-groups.test.ts
@@ -27,6 +27,7 @@ import {
   syncOpenFragment,
   takeOpenGroupsBootstrap,
 } from '@/bench/lib/open-groups';
+import { defined } from '@/lib/defined';
 
 /** Fake the write scheduler's timers and its clock, `performance.now()`. */
 function useFakeClock(): void {
@@ -256,7 +257,7 @@ describe('the open groups on the page', () => {
       // 123 toggles, 50 ms apart: six seconds of fast clicking, which leaves
       // each group toggled an odd number of times, so open.
       for (let i = 0; i < 123; i++) {
-        toggle(GROUPS[i % 3]!.anchor);
+        toggle(defined(GROUPS[i % 3]).anchor);
         vi.advanceTimersByTime(50);
       }
       expect(replace).toHaveBeenCalledTimes(1);
@@ -275,14 +276,16 @@ describe('the open groups on the page', () => {
         });
         const start = Date.now();
         for (let i = 0; Date.now() - start < 10_000; i++) {
-          toggle(GROUPS[i % 3]!.anchor);
+          toggle(defined(GROUPS[i % 3]).anchor);
           vi.advanceTimersByTime(interval);
         }
         vi.advanceTimersByTime(OPEN_FRAGMENT_SYNC_DELAY_MS);
 
         expect(writes.length).toBeGreaterThan(0);
         for (let i = 1; i < writes.length; i++) {
-          expect(writes[i]! - writes[i - 1]!).toBeGreaterThanOrEqual(OPEN_FRAGMENT_SYNC_DELAY_MS);
+          expect(defined(writes[i]) - defined(writes[i - 1])).toBeGreaterThanOrEqual(
+            OPEN_FRAGMENT_SYNC_DELAY_MS,
+          );
         }
         // At most 34 writes in 10 seconds: with Next.js's extra call per write,
         // 68 calls, below Safari's 100.
diff --git a/src/bench/lib/queries.ts b/src/bench/lib/queries.ts
index 116c8bd3..2807914a 100644
--- a/src/bench/lib/queries.ts
+++ b/src/bench/lib/queries.ts
@@ -285,7 +285,7 @@ async function seededCommitsInWindow(
      ORDER BY timestamp ASC, commit_sha ASC
   `;
   const rows = (await getPool().query<SeededCommitRow>(text, params.values)).rows;
-  const totalCommits = rows.length > 0 ? rows[0]!.total_commits : 0;
+  const totalCommits = rows[0]?.total_commits ?? 0;
   const commits: CommitPoint[] = rows.map((row) => ({
     sha: row.commit_sha,
     timestamp: row.ts_text,
@@ -1078,18 +1078,18 @@ function payloadsFromRows(
   for (const row of rows) {
     totals[row.ord - 1] = row.total_commits;
     if (row.commit_sha !== null) {
-      rowsByChart[row.ord - 1]!.push(row);
+      rowsByChart[row.ord - 1]?.push(row);
     }
   }
   return charts.map((key, i) => {
-    const total = totals[i]!;
+    const total = totals[i] ?? 0;
     if (total === 0) {
       return null;
     }
     const history = historyFor(total, window);
     const acc = new SeriesAccumulator();
     acc.seedCommits(commits.slice(commits.length - history.loaded_commits));
-    for (const row of rowsByChart[i]!) {
+    for (const row of rowsByChart[i] ?? []) {
       recordRow(acc, key.k, row);
     }
     return acc.finish(chartDisplayName(key), chartUnitKind(key), history);
@@ -1616,17 +1616,12 @@ async function mapWithConcurrency<T, R>(
   fn: (item: T, index: number) => Promise<R>,
 ): Promise<R[]> {
   const results = new Array<R>(items.length);
-  let next = 0;
+  // Every worker pulls from this one iterator, so each item runs exactly once.
+  const queue = items.entries();
   const workerCount = Math.max(1, Math.min(limit, items.length));
   const workers = Array.from({ length: workerCount }, async () => {
-    for (;;) {
-      // `next++` is atomic here: single-threaded JS guarantees no await runs
-      // between the read and the increment.
-      const i = next++;
-      if (i >= items.length) {
-        return;
-      }
-      results[i] = await fn(items[i]!, i);
+    for (const [i, item] of queue) {
+      results[i] = await fn(item, i);
     }
   });
   await Promise.all(workers);
diff --git a/src/bench/lib/random-access.ts b/src/bench/lib/random-access.ts
index 9e1eaf37..2a309499 100644
--- a/src/bench/lib/random-access.ts
+++ b/src/bench/lib/random-access.ts
@@ -8,5 +8,6 @@ export type RandomAccessStorage = 'nvme' | 's3';
  * `taxi-s3`), since random_access_times has no separate storage dimension.
  */
 export function randomAccessStorage(dataset: string): RandomAccessStorage {
-  return dataset.split('/')[0]!.endsWith('-s3') ? 's3' : 'nvme';
+  const [prefix = ''] = dataset.split('/');
+  return prefix.endsWith('-s3') ? 's3' : 'nvme';
 }
diff --git a/src/bench/lib/schema-version.test.ts b/src/bench/lib/schema-version.test.ts
index 80eb15ca..ccc83619 100644
--- a/src/bench/lib/schema-version.test.ts
+++ b/src/bench/lib/schema-version.test.ts
@@ -7,6 +7,7 @@ import { fileURLToPath } from 'node:url';
 import { describe, expect, it } from 'vitest';
 
 import { SCHEMA_VERSION } from './schema-version';
+import { defined } from '@/lib/defined';
 
 // Anchored declaration for the in-repo SCHEMA_VERSION lockstep site. The
 // canonical contract lives in `CONTRACT.md`; this test reads the doc at test
@@ -33,7 +34,7 @@ function versionFromFile(relPath: string, regex: RegExp, label: string): number
         `moved — update this consistency check and CONTRACT.md together.`,
     );
   }
-  return Number.parseInt(match[1]!, 10);
+  return Number.parseInt(defined(match[1]), 10);
 }
 
 describe('SCHEMA_VERSION', () => {
diff --git a/src/bench/lib/site-files.test.ts b/src/bench/lib/site-files.test.ts
index 9c777349..2cb110e3 100644
--- a/src/bench/lib/site-files.test.ts
+++ b/src/bench/lib/site-files.test.ts
@@ -14,6 +14,7 @@ import {
   sitemapXml,
   summaryLines,
 } from '@/bench/lib/site-files';
+import { defined } from '@/lib/defined';
 
 const VX = 'vortex-file-compressed';
 
@@ -97,7 +98,7 @@ describe('chartSeriesLabel', () => {
 
 describe('summaryLines', () => {
   it('gives a query ranking with its time and coverage', () => {
-    expect(summaryLines(groups[1]!.summary!).slice(2)).toEqual([
+    expect(summaryLines(defined(defined(groups[1]).summary)).slice(2)).toEqual([
       '1. DuckDB on Vortex: 1.00x the fastest, total 3.66 s (all 43 queries)',
       '2. DataFusion on Parquet: 1.60x the fastest, total 5.00 s ' +
         '(40 of 43 queries; each missing one scored with a penalty)',
@@ -105,7 +106,7 @@ describe('summaryLines', () => {
   });
 
   it('gives write and scan throughput against Parquet', () => {
-    const lines = summaryLines(groups[0]!.summary!);
+    const lines = summaryLines(defined(defined(groups[0]).summary));
     expect(lines).toContain('1. Vortex: 2.04x Parquet, 1970 MB/s');
     expect(lines).toContain('1. Vortex: 5.18x Parquet, 51.09 GB/s');
   });
diff --git a/src/bench/lib/site-files.ts b/src/bench/lib/site-files.ts
index 3fe979b4..67f5e1be 100644
--- a/src/bench/lib/site-files.ts
+++ b/src/bench/lib/site-files.ts
@@ -13,7 +13,7 @@
  * bench's public one, whichever host serves the file.
  */
 
-import { groupAnchors } from '@/bench/lib/anchor';
+import { groupAnchor, groupAnchors } from '@/bench/lib/anchor';
 import { groupDocUrl } from '@/bench/lib/benchmark-docs';
 import { formatCompressionSizeRatio, formatThroughput, formatTimeNs } from '@/bench/lib/format';
 import { groupHeadline, headlineText } from '@/bench/lib/headline';
@@ -372,7 +372,7 @@ export function llmsText(groups: readonly Group[], readAt: Date): string {
     }
     const doc = groupDocUrl(group.slug);
     lines.push(
-      `- [${group.name} charts](${groupUrl(anchors[i]!)}): ` +
+      `- [${group.name} charts](${groupUrl(anchors[i] ?? groupAnchor(group.name))}): ` +
         `${group.charts.length} ${group.charts.length === 1 ? 'chart' : 'charts'} ` +
         'of the results over recent commits',
     );
diff --git a/src/bench/lib/slug.test.ts b/src/bench/lib/slug.test.ts
index 977a0112..5f168d30 100644
--- a/src/bench/lib/slug.test.ts
+++ b/src/bench/lib/slug.test.ts
@@ -11,6 +11,7 @@ import {
   type GroupKey,
 } from './slug';
 import { familyForChartKind, familyForGroupKind } from './families';
+import { defined } from '@/lib/defined';
 
 const CHART_KEYS: ChartKey[] = [
   {
@@ -131,7 +132,7 @@ describe('canonical slug encoding', () => {
       query_idx: 7,
     }).split('.');
     expect(prefix).toBe('qm');
-    expect(Buffer.from(payload!, 'base64url').toString('utf8')).toBe(
+    expect(Buffer.from(defined(payload), 'base64url').toString('utf8')).toBe(
       '{"k":"QueryMeasurement","dataset":"tpch","dataset_variant":null,"scale_factor":"1","storage":"nvme","query_idx":7}',
     );
   });
@@ -144,7 +145,7 @@ describe('canonical slug encoding', () => {
       scale_factor: '1',
       storage: 'nvme',
     }).split('.')[1];
-    expect(Buffer.from(payload!, 'base64url').toString('utf8')).toBe(
+    expect(Buffer.from(defined(payload), 'base64url').toString('utf8')).toBe(
       '{"k":"QueryGroup","dataset":"tpch","dataset_variant":null,"scale_factor":"1","storage":"nvme"}',
     );
   });
diff --git a/src/bench/lib/summary.test.ts b/src/bench/lib/summary.test.ts
index f1760a26..69071d88 100644
--- a/src/bench/lib/summary.test.ts
+++ b/src/bench/lib/summary.test.ts
@@ -12,6 +12,7 @@ vi.mock('./db', () => ({
 import { FAMILIES } from './families';
 import type { GroupKey } from './slug';
 import { collectGroupSummary } from './summary';
+import { defined } from '@/lib/defined';
 
 /** Every group discriminant, from the fact-table registry. */
 const GROUP_KINDS = FAMILIES.map((family) => family.groupKind);
@@ -96,7 +97,7 @@ describe('compression summaries', () => {
     if (summary === null || summary.type !== 'compression') {
       throw new Error('expected a compression summary');
     }
-    const ranking = summary.rankings[0]!;
+    const ranking = defined(summary.rankings[0]);
 
     expect(ranking.ratio).toBeCloseTo(1, 6);
     expect(ranking.throughputGbS).toBeCloseTo(7.5, 6);
@@ -207,8 +208,8 @@ describe('compression summaries', () => {
       ['wide table %', 'sparse-wide-%'],
     ];
     const calls = query.mock.calls as Array<[string, unknown[]]>;
-    expect(calls[0]![1]).toEqual(timingParams);
-    expect(calls[1]![1]).toEqual(sizeParams);
+    expect(defined(calls[0])[1]).toEqual(timingParams);
+    expect(defined(calls[1])[1]).toEqual(sizeParams);
     for (const [text] of calls) {
       expect(text).toContain('format = ANY($1::text[])');
       expect(text).toContain('format = ANY($2::text[])');
@@ -223,19 +224,19 @@ describe('compression summaries', () => {
       // another hard-coded format branch or a per-dataset history scan.
       expect(text).not.toContain("format = 'lance'");
     }
-    expect(calls[0]![0]).toContain('latest_uncompressed_sizes');
+    expect(defined(calls[0])[0]).toContain('latest_uncompressed_sizes');
     for (const [text] of calls) {
       // Read the column directly: `to_jsonb(s)` serialized every row (a
       // whole-table CPU cost on every summary) just to reach one field.
       expect(text).toMatch(/\bs\.uncompressed_bytes\b/);
       expect(text).not.toContain('to_jsonb(');
     }
-    expect(calls[0]![0]).toContain('LEFT JOIN latest_uncompressed_sizes');
-    expect(calls[1]![0]).toContain('latest_uncompressed_sizes');
-    expect(calls[1]![0]).toContain('latest_arrow_ipc');
-    expect(calls[1]![0]).toContain('selected_with_arrow_ipc');
-    expect(calls[1]![0]).toContain('LEFT JOIN latest_uncompressed_sizes');
-    expect(calls[1]![0]).toContain(
+    expect(defined(calls[0])[0]).toContain('LEFT JOIN latest_uncompressed_sizes');
+    expect(defined(calls[1])[0]).toContain('latest_uncompressed_sizes');
+    expect(defined(calls[1])[0]).toContain('latest_arrow_ipc');
+    expect(defined(calls[1])[0]).toContain('selected_with_arrow_ipc');
+    expect(defined(calls[1])[0]).toContain('LEFT JOIN latest_uncompressed_sizes');
+    expect(defined(calls[1])[0]).toContain(
       'COALESCE(uncompressed.uncompressed_bytes, selected.uncompressed_bytes)',
     );
   });
@@ -298,9 +299,12 @@ describe('timing summaries (shared ranking model)', () => {
       throw new Error('expected a randomAccess summary');
     }
     expect(summary.hotRankings.map((r) => r.name)).toEqual(['vortex', 'lance']);
-    expect(summary.hotRankings[0]!.score).toBeCloseTo(Math.cbrt(1_100_010 / 350_010), 6);
-    expect(summary.hotRankings[1]!.score).toBeCloseTo(Math.cbrt((3_000_010 / 1_000_010) ** 2), 6);
-    expect(summary.hotRankings[0]!.totalRuntime).toBeCloseTo(3_100_000 / 3, 6);
+    expect(defined(summary.hotRankings[0]).score).toBeCloseTo(Math.cbrt(1_100_010 / 350_010), 6);
+    expect(defined(summary.hotRankings[1]).score).toBeCloseTo(
+      Math.cbrt((3_000_010 / 1_000_010) ** 2),
+      6,
+    );
+    expect(defined(summary.hotRankings[0]).totalRuntime).toBeCloseTo(3_100_000 / 3, 6);
     expect(summary.hotRankings.map((r) => r.measured)).toEqual([3, 3]);
     expect(summary.hotRankings.map((r) => r.total)).toEqual([3, 3]);
     expect(summary.coldRankings).toEqual([]);
@@ -454,8 +458,11 @@ describe('timing summaries (shared ranking model)', () => {
       ['lance', 1, 2, 100_000],
       ['vortex', 1, 2, 200_000],
     ]);
-    expect(summary.hotRankings[0]!.score).toBeCloseTo(Math.sqrt(2), 6);
-    expect(summary.hotRankings[1]!.score).toBeCloseTo(Math.sqrt(2 * (200_010 / 100_010)), 6);
+    expect(defined(summary.hotRankings[0]).score).toBeCloseTo(Math.sqrt(2), 6);
+    expect(defined(summary.hotRankings[1]).score).toBeCloseTo(
+      Math.sqrt(2 * (200_010 / 100_010)),
+      6,
+    );
     expect(
       summary.coldRankings.map((ranking) => [
         ranking.name,
@@ -467,8 +474,11 @@ describe('timing summaries (shared ranking model)', () => {
       ['vortex', 2, 3, 200_000],
       ['lance', 2, 3, 300_000],
     ]);
-    expect(summary.coldRankings[0]!.score).toBeCloseTo(Math.cbrt(2), 6);
-    expect(summary.coldRankings[1]!.score).toBeCloseTo(Math.cbrt(2 * (400_010 / 200_010)), 6);
+    expect(defined(summary.coldRankings[0]).score).toBeCloseTo(Math.cbrt(2), 6);
+    expect(defined(summary.coldRankings[1]).score).toBeCloseTo(
+      Math.cbrt(2 * (400_010 / 200_010)),
+      6,
+    );
   });
 
   it('reports zero coverage when no random-access dataset is complete', async () => {
@@ -531,8 +541,8 @@ describe('timing summaries (shared ranking model)', () => {
 
     expect(summary.hotRankings.map((ranking) => ranking.name)).toEqual(['vortex', 'parquet']);
     expect(summary.coldRankings.map((ranking) => ranking.name)).toEqual(['parquet', 'vortex']);
-    expect(summary.hotRankings[0]!.totalRuntime).toBe(100_000);
-    expect(summary.coldRankings[0]!.totalRuntime).toBe(300_000);
+    expect(defined(summary.hotRankings[0]).totalRuntime).toBe(100_000);
+    expect(defined(summary.coldRankings[0]).totalRuntime).toBe(300_000);
   });
 
   it('summarizes a vector-search group across its thresholds', async () => {
@@ -555,9 +565,12 @@ describe('timing summaries (shared ranking model)', () => {
     }
     expect(summary.title).toBe('Vector Search Performance');
     expect(summary.rankings.map((r) => r.name)).toEqual(['vortex-turboquant', 'vortex-flat']);
-    expect(summary.rankings[0]!.score).toBeCloseTo(1.0, 6);
-    expect(summary.rankings[1]!.score).toBeCloseTo(Math.sqrt((2010 / 1010) * (8010 / 2010)), 6);
-    expect(summary.rankings[1]!.totalRuntime).toBeCloseTo(10_000, 6);
+    expect(defined(summary.rankings[0]).score).toBeCloseTo(1.0, 6);
+    expect(defined(summary.rankings[1]).score).toBeCloseTo(
+      Math.sqrt((2010 / 1010) * (8010 / 2010)),
+      6,
+    );
+    expect(defined(summary.rankings[1]).totalRuntime).toBeCloseTo(10_000, 6);
   });
 
   it.each([
diff --git a/src/bench/lib/test-harness.ts b/src/bench/lib/test-harness.ts
index 39895264..ffc82ad6 100644
--- a/src/bench/lib/test-harness.ts
+++ b/src/bench/lib/test-harness.ts
@@ -278,8 +278,7 @@ export async function seedChartFixture(pool: Pool): Promise<void> {
       [sha, ts, msg, TREE_SHA, commitUrl(sha)],
     );
   }
-  for (let i = 0; i < COMMITS.length; i += 1) {
-    const sha = COMMITS[i]![0];
+  for (const [i, [sha]] of COMMITS.entries()) {
     const bias = i * 50_000;
     // query_measurements: Q1 has two engine/format series, Q2 has one.
     const qm: ReadonlyArray<readonly [number, string, string, number]> = [
diff --git a/src/bench/lib/vercel-config.test.ts b/src/bench/lib/vercel-config.test.ts
index b635c6dd..3b88e248 100644
--- a/src/bench/lib/vercel-config.test.ts
+++ b/src/bench/lib/vercel-config.test.ts
@@ -4,6 +4,7 @@
 import { readFileSync } from 'node:fs';
 import { fileURLToPath } from 'node:url';
 import { describe, expect, it } from 'vitest';
+import { defined } from '@/lib/defined';
 
 interface HeaderRule {
   source: string;
@@ -31,10 +32,10 @@ function hostName(pattern: string): string {
   }
   // Labels joined by escaped dots, and nothing else: an unescaped dot or any
   // other regular-expression character fails.
-  if (!/^[a-z0-9-]+(?:\\\.[a-z0-9-]+)+$/.test(match[1]!)) {
+  if (!/^[a-z0-9-]+(?:\\\.[a-z0-9-]+)+$/.test(defined(match[1]))) {
     throw new Error(`host condition ${pattern} is not an escaped host name`);
   }
-  return match[1]!.replaceAll('\\.', '.');
+  return defined(match[1]).replaceAll('\\.', '.');
 }
 
 /** The paths (with any host condition) that get bench's page CDN rule. */
diff --git a/src/bench/styles/globals.spinner.test.ts b/src/bench/styles/globals.spinner.test.ts
index f808c0da..23d16be1 100644
--- a/src/bench/styles/globals.spinner.test.ts
+++ b/src/bench/styles/globals.spinner.test.ts
@@ -6,6 +6,7 @@
 import { readFileSync } from 'node:fs';
 import { join } from 'node:path';
 import { describe, expect, it } from 'vitest';
+import { defined } from '@/lib/defined';
 
 const css = readFileSync(join(__dirname, 'globals.css'), 'utf8');
 
@@ -20,7 +21,7 @@ describe('PR-5.0.95 spinner CSS', () => {
       /@media\s*\(prefers-reduced-motion:\s*reduce\)\s*\{(?:[^{}]|\{[^{}]*\})*\}/g,
     );
     expect(reduced).not.toBeNull();
-    expect(reduced!.join('\n')).toMatch(/\.chart-spinner[\s\S]*animation:\s*none/);
+    expect(defined(reduced).join('\n')).toMatch(/\.chart-spinner[\s\S]*animation:\s*none/);
   });
 });
 
@@ -38,7 +39,7 @@ describe('PR-5.0.97 chart-placeholder CSS', () => {
       /@media\s*\(prefers-reduced-motion:\s*reduce\)\s*\{(?:[^{}]|\{[^{}]*\})*\}/g,
     );
     expect(reduced).not.toBeNull();
-    const block = reduced!.join('\n');
+    const block = defined(reduced).join('\n');
     expect(block).toMatch(/\.chart-placeholder\s+\.chart-spinner/);
     expect(block).toMatch(/animation:\s*none/);
   });
@@ -48,7 +49,7 @@ describe('PR-5.0.97 chart-placeholder CSS', () => {
       /@media\s*\(prefers-reduced-motion:\s*reduce\)\s*\{(?:[^{}]|\{[^{}]*\})*\}/g,
     );
     expect(reduced).not.toBeNull();
-    const block = reduced!.join('\n');
+    const block = defined(reduced).join('\n');
     // The ring and label must stay visible; display:none is forbidden here.
     expect(block).not.toMatch(/\.chart-placeholder[\s\S]*display\s*:\s*none/);
     expect(block).not.toMatch(/\.chart-placeholder-text[\s\S]*display\s*:\s*none/);
diff --git a/src/lib/defined.ts b/src/lib/defined.ts
new file mode 100644
index 00000000..87a8a838
--- /dev/null
+++ b/src/lib/defined.ts
@@ -0,0 +1,11 @@
+/**
+ * `value`, or an error when it is null or undefined. Use it where an index or
+ * a lookup must find something (tests above all), in place of a non-null
+ * assertion (`value!`), which fails later and with less to go on.
+ */
+export function defined<T>(value: T | null | undefined, what = "value"): T {
+  if (value === null || value === undefined) {
+    throw new Error(`expected ${what} to be defined, got ${value}`);
+  }
+  return value;
+}
diff --git a/tests/unit/defined.test.ts b/tests/unit/defined.test.ts
new file mode 100644
index 00000000..6b990829
--- /dev/null
+++ b/tests/unit/defined.test.ts
@@ -0,0 +1,24 @@
+import assert from "node:assert/strict";
+import { describe, it } from "node:test";
+import { defined } from "@/lib/defined";
+
+describe("defined", () => {
+  it("returns a value that is there, falsy values included", () => {
+    assert.equal(defined(0), 0);
+    assert.equal(defined(""), "");
+    assert.equal(defined(false), false);
+    const list = [1, 2];
+    assert.equal(defined(list[1]), 2);
+  });
+
+  it("throws on null and undefined, and names what is missing", () => {
+    assert.throws(
+      () => defined(null),
+      /expected value to be defined, got null/
+    );
+    assert.throws(
+      () => defined([][0], "the first row"),
+      /expected the first row to be defined, got undefined/
+    );
+  });
+});
diff --git a/tests/unit/subscribe.test.ts b/tests/unit/subscribe.test.ts
index e3ece854..725229d1 100644
--- a/tests/unit/subscribe.test.ts
+++ b/tests/unit/subscribe.test.ts
@@ -2,6 +2,7 @@ import assert from "node:assert/strict";
 import { afterEach, beforeEach, describe, it } from "node:test";
 import { NextRequest } from "next/server";
 import { POST } from "@/app/(site)/api/subscribe/route";
+import { defined } from "@/lib/defined";
 
 const ORIGIN = "https://vortex.dev";
 
@@ -70,7 +71,10 @@ describe("POST /api/subscribe", () => {
     assert.equal(res.status, 200);
     assert.deepEqual(await res.json(), { success: true });
     assert.equal(resendCalls.length, 1);
-    assert.equal(JSON.parse(resendCalls[0]!.body).email, "ada@example.com");
+    assert.equal(
+      JSON.parse(defined(resendCalls[0]).body).email,
+      "ada@example.com"
+    );
   });
 
   it("answers an existing contact as it answers a new one", async () => {

From a6dc090e924cfac33b99b45ff43510c43ff4747c Mon Sep 17 00:00:00 2001
From: Will Manning <will@willmanning.io>
Date: Wed, 4 Nov 2026 02:26:22 -0500
Subject: [PATCH 8/9] Add knip, and remove the unused exports it found

knip reports unused files, exports, and dependencies. knip.json names
the entry points that no import reaches: the Lighthouse, velite, and
bench PostCSS configs, and the scripts that CI or a person runs. It
skips the vendored design-system renderer.

Nine exports and eight exported types were used only in their own
file, so they are no longer exported. Two types were not used at all,
so they are gone. The GPU result's Parquet times now take their length
from PARQUET_CONFIGS, the list they were documented to follow.

CI runs `bun run knip` after the build, because knip resolves
`#site/content` to .velite/, which the build writes.

Signed-off-by: Will Manning <will@willmanning.io>
---
 .github/workflows/ci.yml      |   6 ++
 bun.lock                      | 115 +++++++++++++++++++++++++++++++++-
 knip.json                     |  13 ++++
 package.json                  |   2 +
 src/bench/lib/base-path.ts    |   4 +-
 src/bench/lib/branch.ts       |   2 +-
 src/bench/lib/chart-format.ts |   2 +-
 src/bench/lib/families.ts     |   2 +-
 src/bench/lib/headline.ts     |   4 +-
 src/bench/lib/queries.ts      |   2 +-
 src/bench/lib/site-files.ts   |   2 +-
 src/bench/lib/summary.ts      |   7 +--
 src/bench/lib/test-harness.ts |   2 +-
 src/bench/lib/window.ts       |   2 +-
 src/lib/gpu-result.ts         |  10 ++-
 src/lib/install.ts            |   2 +-
 src/lib/llms.ts               |   2 +-
 src/lib/rehype-blog.ts        |   2 +-
 src/lib/theme.ts              |   2 -
 19 files changed, 159 insertions(+), 24 deletions(-)
 create mode 100644 knip.json

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 7d8219c8..790f5e46 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -86,6 +86,12 @@ jobs:
       - name: Type check
         run: bun run typecheck
 
+      # knip finds unused files, exports and dependencies. It runs after the
+      # build for the same reason tsc does: it resolves `#site/content` to
+      # .velite/, which the build writes.
+      - name: Unused code and dependencies
+        run: bun run knip
+
       - name: Unit tests
         run: bun run test
 
diff --git a/bun.lock b/bun.lock
index 429fe72c..55b0b086 100644
--- a/bun.lock
+++ b/bun.lock
@@ -30,6 +30,7 @@
         "@types/react": "^19.3.0",
         "@types/react-dom": "^19.3.0",
         "jsdom": "^30.1.2",
+        "knip": "^6.43.0",
         "typescript": "^7.0.2",
         "vite": "^8.3.4",
         "vitest": "^5.0.4",
@@ -91,7 +92,11 @@
 
     "@csstools/css-tokenizer": ["@csstools/css-tokenizer@4.0.2", "", {}, "sha512-OoKoR0f76dCY666JlcbhmVTs2drYj1GUXZTYTcbUgJjh9Nv41aFfZ21bPQTERm5+L5cBDo466NltB2lplS5GBw=="],
 
-    "@emnapi/runtime": ["@emnapi/runtime@1.11.3", "", { "dependencies": { "tslib": "^2.4.0" } }, "sha512-Xz4Tpyki7XyrpbUK1jR1AhdAdaXyhhY4lZ3neLodmhpuWfy2PAQN5B46sAiU4liOXGLkHypn/qU+jvfWSCYYLA=="],
+    "@emnapi/core": ["@emnapi/core@1.11.2", "", { "dependencies": { "@emnapi/wasi-threads": "1.2.2", "tslib": "^2.4.0" } }, "sha512-TC8MkTuZUtcTSiFeuC0ksCh9QIJ5+F21MvZ4Wn4ORfYaFJ/0dsiudv5tVkejgwZlwQ39jL9WWDe2lz8x0WglOA=="],
+
+    "@emnapi/runtime": ["@emnapi/runtime@1.11.2", "", { "dependencies": { "tslib": "^2.4.0" } }, "sha512-kyOl3X0DuTiT1h2ft8r2fYO8JYtU9a9Xis/zBSiGArNaagCOWx90N1k2wxp18czFDH+OgcWGb5ZP/XMt3dcyPA=="],
+
+    "@emnapi/wasi-threads": ["@emnapi/wasi-threads@1.2.2", "", { "dependencies": { "tslib": "^2.4.0" } }, "sha512-c95qOXkHdydNKhscBTebqEC1CVAZpyqOfVfBzQ1qgzyl3gfeldUjIggDbIZgDKsHLgnsM+igH7TJ/eAasaVuMA=="],
 
     "@esbuild/aix-ppc64": ["@esbuild/aix-ppc64@0.25.12", "", { "os": "aix", "cpu": "ppc64" }, "sha512-Hhmwd6CInZ3dwpuGTF8fJG6yoWmsToE+vYgD4nytZVxcu1ulHpUQRAB1UJ8+N1Am3Mz4+xOByoQoSZf4D+CpkA=="],
 
@@ -225,6 +230,8 @@
 
     "@mdx-js/mdx": ["@mdx-js/mdx@3.1.1", "", { "dependencies": { "@types/estree": "^1.0.0", "@types/estree-jsx": "^1.0.0", "@types/hast": "^3.0.0", "@types/mdx": "^2.0.0", "acorn": "^8.0.0", "collapse-white-space": "^2.0.0", "devlop": "^1.0.0", "estree-util-is-identifier-name": "^3.0.0", "estree-util-scope": "^1.0.0", "estree-walker": "^3.0.0", "hast-util-to-jsx-runtime": "^2.0.0", "markdown-extensions": "^2.0.0", "recma-build-jsx": "^1.0.0", "recma-jsx": "^1.0.0", "recma-stringify": "^1.0.0", "rehype-recma": "^1.0.0", "remark-mdx": "^3.0.0", "remark-parse": "^11.0.0", "remark-rehype": "^11.0.0", "source-map": "^0.7.0", "unified": "^11.0.0", "unist-util-position-from-estree": "^2.0.0", "unist-util-stringify-position": "^4.0.0", "unist-util-visit": "^5.0.0", "vfile": "^6.0.0" } }, "sha512-f6ZO2ifpwAQIpzGWaBQT2TXxPv6z3RBzQKpVftEWN78Vl/YweF1uwussDx8ECAXVtr3Rs89fKyG9YlzUs9DyGQ=="],
 
+    "@napi-rs/wasm-runtime": ["@napi-rs/wasm-runtime@1.2.6", "", { "dependencies": { "@tybys/wasm-util": "^0.10.3" }, "peerDependencies": { "@emnapi/core": "^1.7.1 || 2.0.0-beta.2", "@emnapi/runtime": "^1.7.1 || 2.0.0-beta.2" } }, "sha512-mRyDmEw9/fCDXCGfL1sbgIw/GUK0PVxRW4YwgPN61F3LQ+fSyoBFarJVzgGyhF6kRzEQZ0FejDqm4WLXSeqQmw=="],
+
     "@next/env": ["@next/env@16.4.1", "", {}, "sha512-5sUUrrSvs/2/2LnLoesybMGx12EtPB46fdZ6RhAw0XDGSPxU2LFyQBB7yuEiOFFJPKmBY6+q2jTr1/AMbnp0/g=="],
 
     "@next/swc-darwin-arm64": ["@next/swc-darwin-arm64@16.4.1", "", { "os": "darwin", "cpu": "arm64" }, "sha512-U+hQ5Gj3fpzf4fveTIF3dpUFYhaSW8vHhdAnbiIomzXzg7boreYFgBqprepXFtW4sw+aTttiNmg0gew/iFNhbg=="],
@@ -243,8 +250,84 @@
 
     "@next/swc-win32-x64-msvc": ["@next/swc-win32-x64-msvc@16.4.1", "", { "os": "win32", "cpu": "x64" }, "sha512-6ICqPo9awCkrtYNPhwkx1uU7rlFWrZRrIboDHS2LU+jv088UBYQtmJ25h6pCp27/+FZjF6BQ4Te4ErugyMeuBg=="],
 
+    "@oxc-parser/binding-android-arm-eabi": ["@oxc-parser/binding-android-arm-eabi@0.155.0", "", { "os": "android", "cpu": "arm" }, "sha512-A6xv7hDtnTm+xlZ7utn6rRQpRMJHRhVr3gjRGqlx0RUX84mNk0pAsy6YN/wWhuOTkaZhRrrzaLxf0NfbH77j2w=="],
+
+    "@oxc-parser/binding-android-arm64": ["@oxc-parser/binding-android-arm64@0.155.0", "", { "os": "android", "cpu": "arm64" }, "sha512-T1wWwH9/JI5g7Z4kEQwDOwhToxdDhRyOTklH+uuNpJ16m3MZFmGl+l2rKc0NHQdbVRG2LTOBsNjpW3h1BWytPA=="],
+
+    "@oxc-parser/binding-darwin-arm64": ["@oxc-parser/binding-darwin-arm64@0.155.0", "", { "os": "darwin", "cpu": "arm64" }, "sha512-ZoRB3qJxJ8DWA41jHja+YeB0lLfjBy4T+Kr15vnN1k65X3zbJt3rPZftEwN4Ju4tmA4K/T9dWWD7Z8ewQLnrVA=="],
+
+    "@oxc-parser/binding-darwin-x64": ["@oxc-parser/binding-darwin-x64@0.155.0", "", { "os": "darwin", "cpu": "x64" }, "sha512-vxtL86BtM+IgrpejA86nbTk5j0HKTIMeuaJ1fQciw6p9RfavPtIPjI7gN34owap0yG9txXBaAWpGdxokNwdqIw=="],
+
+    "@oxc-parser/binding-freebsd-x64": ["@oxc-parser/binding-freebsd-x64@0.155.0", "", { "os": "freebsd", "cpu": "x64" }, "sha512-tN6Ru5e0UVnWaIuiH8jEwnvxuxg7FvhWwSd3oe5oDhOD4ObsSr9/N6WfHLjilUWlPPj65ptwrSDH0Y7lzwTzmw=="],
+
+    "@oxc-parser/binding-linux-arm-gnueabihf": ["@oxc-parser/binding-linux-arm-gnueabihf@0.155.0", "", { "os": "linux", "cpu": "arm" }, "sha512-h4ozA5n6L6lwolsz9iwunEhKWnIVbmFRots5QxEix0H6nJ5ICpuDa7PuShuhfpIDFe3+Qvyscioyiv+9g+4Syg=="],
+
+    "@oxc-parser/binding-linux-arm-musleabihf": ["@oxc-parser/binding-linux-arm-musleabihf@0.155.0", "", { "os": "linux", "cpu": "arm" }, "sha512-058/+LardpfuUlsKIvBGk/CYoakEVcMgqYx8GgyUZeOxFWTojYLlCc1Gb60/y21v3esDhHidgiY/Zbq9LpBhaQ=="],
+
+    "@oxc-parser/binding-linux-arm64-gnu": ["@oxc-parser/binding-linux-arm64-gnu@0.155.0", "", { "os": "linux", "cpu": "arm64" }, "sha512-nrOt2Y3xIAzu+lSPzH0864ieO+iCCXgoo9qFlGANE8Xh0cQ+RP8Wstfp+/wXN2YCyb98cAGzX0VruKYw7it/jw=="],
+
+    "@oxc-parser/binding-linux-arm64-musl": ["@oxc-parser/binding-linux-arm64-musl@0.155.0", "", { "os": "linux", "cpu": "arm64" }, "sha512-KYAayyN5hQbJPtGKtRxlyc8XYmyntOplyXSQzTDrmbz7l/GCrzQbSswvyJFBTH1LGtsZrbXOAfN52i/Kz6kLKg=="],
+
+    "@oxc-parser/binding-linux-ppc64-gnu": ["@oxc-parser/binding-linux-ppc64-gnu@0.155.0", "", { "os": "linux", "cpu": "ppc64" }, "sha512-CSuSY5hfjtsBnHXydOj8jiNfS1qHbdPZuPz1YL1cSgK7VmNYP+QlZIbG0BBYYBgX/vYEgZwbG9mBdW4YairZ5w=="],
+
+    "@oxc-parser/binding-linux-riscv64-gnu": ["@oxc-parser/binding-linux-riscv64-gnu@0.155.0", "", { "os": "linux", "cpu": "none" }, "sha512-7KCfOQm+Nz2N8trAXbQkal4TQ5756WVEmhm35y816YHvyFnEfVsICsiV5k0pEszNf/fRm4cm2i6i18SJ6/iCWg=="],
+
+    "@oxc-parser/binding-linux-riscv64-musl": ["@oxc-parser/binding-linux-riscv64-musl@0.155.0", "", { "os": "linux", "cpu": "none" }, "sha512-JSlhgoK+/g1TGJI5NuADx2+6syhxnQNLCWLXyO5QLFyetomcr/vIxSdiNlmyAv963YXUzCuwAwRG6npZ5xyJ1A=="],
+
+    "@oxc-parser/binding-linux-s390x-gnu": ["@oxc-parser/binding-linux-s390x-gnu@0.155.0", "", { "os": "linux", "cpu": "s390x" }, "sha512-WFIX+dPokWp64mi434Md3U3lJaTwNxAphvGjpltoyQjGUsdXavOIRrnp9dOS34Hd75HOAwDxAI+YwWOwqmJbtg=="],
+
+    "@oxc-parser/binding-linux-x64-gnu": ["@oxc-parser/binding-linux-x64-gnu@0.155.0", "", { "os": "linux", "cpu": "x64" }, "sha512-g6xSDC/JpbnVOz5uafMGyK3txBVRFMQTx8opv/yHXGxqV3ZMVl3bf7W8XrSnF68dmy3gM4dgReNryuE53+WkeQ=="],
+
+    "@oxc-parser/binding-linux-x64-musl": ["@oxc-parser/binding-linux-x64-musl@0.155.0", "", { "os": "linux", "cpu": "x64" }, "sha512-6/4xlxKlZJWrQ0uwDFPc0H9+xLu7068CKhX3vIDW3SbvP/lVgnVuT5v6dyugeWskWpuxqF/WJ4WKwhxjU3pG2w=="],
+
+    "@oxc-parser/binding-openharmony-arm64": ["@oxc-parser/binding-openharmony-arm64@0.155.0", "", { "os": "none", "cpu": "arm64" }, "sha512-tltklL0J0XjDxIRTBXWOBhvc2mitcmES45pIxhwDWfxRyqz7Vkeu0NekTZEIxGE4f/lXgq3vZcjjffteQOVorg=="],
+
+    "@oxc-parser/binding-win32-arm64-msvc": ["@oxc-parser/binding-win32-arm64-msvc@0.155.0", "", { "os": "win32", "cpu": "arm64" }, "sha512-alAb9TzjatUEsOeoncAziUnfdTDxfyswhalFZ9sC6plUgATIUx2NIZ0+bMn6aJ28AduS1OpG/OAisr/YISn4Ig=="],
+
+    "@oxc-parser/binding-win32-ia32-msvc": ["@oxc-parser/binding-win32-ia32-msvc@0.155.0", "", { "os": "win32", "cpu": "ia32" }, "sha512-yc5cbSfcGmRv/KpxDFuyk8adEBaWd/9HilWvBbQ4bFbus1V2PUh2mGB2Cfq9rqZTqLeiMT8x0skV+LKp9hOMgQ=="],
+
+    "@oxc-parser/binding-win32-x64-msvc": ["@oxc-parser/binding-win32-x64-msvc@0.155.0", "", { "os": "win32", "cpu": "x64" }, "sha512-8heq6jGq+rfpTDRDjoQiBHw0maQZf3IXkS99pdHQZPoTL5kyF5qyPS0RidUlSdnWDIqxXb5nux7GBD9cT+imUw=="],
+
     "@oxc-project/types": ["@oxc-project/types@0.155.0", "", {}, "sha512-SeE8JPwW1xs1tHeNycjUtUBdhorRa8o4jlvjwk49R7/Z291i+4DQa7JJIgOm/TaYQZx+QrPQbVJ/9c8dMIZN8Q=="],
 
+    "@oxc-resolver/binding-android-arm-eabi": ["@oxc-resolver/binding-android-arm-eabi@11.24.2", "", { "os": "android", "cpu": "arm" }, "sha512-y09e0L0SRI2OA2tUIrjBgoV3eH5hvUKXNkJqXmNo5V2WxIjyC7I7aJfRLMEVpA8yi95f90gFDvO0VMgrDw+vwA=="],
+
+    "@oxc-resolver/binding-android-arm64": ["@oxc-resolver/binding-android-arm64@11.24.2", "", { "os": "android", "cpu": "arm64" }, "sha512-cl4icWaZFnLdg8m6qtnh5rBMuGbxc/ptStFHLeCNwr+2cZjkjNwQu/jYRS0CHlnPecOJMpuS5M6/BH+0J/YkEg=="],
+
+    "@oxc-resolver/binding-darwin-arm64": ["@oxc-resolver/binding-darwin-arm64@11.24.2", "", { "os": "darwin", "cpu": "arm64" }, "sha512-At29QEMF6HajbQvgY8K6OXnHD1x9rad74xBEfmCB6ZqCGsdq75aK7tOYcTbOanMy8qdIBrfL3SMr3p/lfSlb9w=="],
+
+    "@oxc-resolver/binding-darwin-x64": ["@oxc-resolver/binding-darwin-x64@11.24.2", "", { "os": "darwin", "cpu": "x64" }, "sha512-A5Kqr1EUj4oIL5CF4WRssq/o5P0Y11cwoFouMRmQ7YnC/A8V93nv1nb7aSU8HwcgmXropjLNkVTl4MN87cu28Q=="],
+
+    "@oxc-resolver/binding-freebsd-x64": ["@oxc-resolver/binding-freebsd-x64@11.24.2", "", { "os": "freebsd", "cpu": "x64" }, "sha512-R5xkRBRRz7ceH/P5Jrc6G7FmdUdgpLYyESFAUDVTNQ9K0sGPxcp4ljiwEwEqsvNcQ4sYbMRrWcHHBCu7ksAJVw=="],
+
+    "@oxc-resolver/binding-linux-arm-gnueabihf": ["@oxc-resolver/binding-linux-arm-gnueabihf@11.24.2", "", { "os": "linux", "cpu": "arm" }, "sha512-k/RuYL4L/R58IBn3wT5ma3Wh4k62bp1eYCFRWCmMsasUOqL+H6sW0VGFadEzKWXFFlz+2uIMoeMk9ySSZJHgbg=="],
+
+    "@oxc-resolver/binding-linux-arm-musleabihf": ["@oxc-resolver/binding-linux-arm-musleabihf@11.24.2", "", { "os": "linux", "cpu": "arm" }, "sha512-bnHAak3ujYfH5pKk4NieFNbvYvernfoQDgwLddbZ3OtMYrem87/qjlA+u+aKG0oZcqSLGCful/6/CEA+aeAgaA=="],
+
+    "@oxc-resolver/binding-linux-arm64-gnu": ["@oxc-resolver/binding-linux-arm64-gnu@11.24.2", "", { "os": "linux", "cpu": "arm64" }, "sha512-vDT3KHgzYp47gmtNOqL2VNhCyl5Zv643eyxm//A68J8DeUGXrvD1pZFiaT4jSfe+RInfnn1R2yVHye4enx6RnA=="],
+
+    "@oxc-resolver/binding-linux-arm64-musl": ["@oxc-resolver/binding-linux-arm64-musl@11.24.2", "", { "os": "linux", "cpu": "arm64" }, "sha512-+kMlQvbzfyEYtu5FcjE4p+ttBLpKW4d/AsAsuE69BxV6V4twZJeIQZFfD8gh/wqglY0MkPSezWXQH0jBV13MUw=="],
+
+    "@oxc-resolver/binding-linux-ppc64-gnu": ["@oxc-resolver/binding-linux-ppc64-gnu@11.24.2", "", { "os": "linux", "cpu": "ppc64" }, "sha512-shjfMhmZ3gq9fv/w7bi3PnZlgOPG+2QAOFf0BJF0EgBSIGZ6PMLN2zbGEblTUYB/NKVDRyYhE2ff3dJ1QqNPkA=="],
+
+    "@oxc-resolver/binding-linux-riscv64-gnu": ["@oxc-resolver/binding-linux-riscv64-gnu@11.24.2", "", { "os": "linux", "cpu": "none" }, "sha512-zGelwFR5oRo+b69k8Lrzun86DyUHzfKN6cnjbR9l7Z7NIRznOE/2ZvPa1IUKqAL2PzAXOdwkfVqNvO1H2RlpAw=="],
+
+    "@oxc-resolver/binding-linux-riscv64-musl": ["@oxc-resolver/binding-linux-riscv64-musl@11.24.2", "", { "os": "linux", "cpu": "none" }, "sha512-qxZ1SWCXJY0eyhAlP6Lmo9F2Nrtx7EkYj9oCgL8apDPCwXwCEDA2U697bbT81JIc2IrVjxO4KX6WU2N+oN9Z4w=="],
+
+    "@oxc-resolver/binding-linux-s390x-gnu": ["@oxc-resolver/binding-linux-s390x-gnu@11.24.2", "", { "os": "linux", "cpu": "s390x" }, "sha512-sGCecF3cx2DFlH4t/z7ApnOnXqN48p5p5mlHDEnHTAukQa2P+qMVE4CwyWE9W+q/m3QJ7kKfGrIjax31f44oFQ=="],
+
+    "@oxc-resolver/binding-linux-x64-gnu": ["@oxc-resolver/binding-linux-x64-gnu@11.24.2", "", { "os": "linux", "cpu": "x64" }, "sha512-k/VlMMcSzMlahb3/fENM4rTlsJ0s3fFROA0KXPBmKggqmTSaE383sl8F3KCOXPLmVsYfW6hCitMhXCEtNeZxxg=="],
+
+    "@oxc-resolver/binding-linux-x64-musl": ["@oxc-resolver/binding-linux-x64-musl@11.24.2", "", { "os": "linux", "cpu": "x64" }, "sha512-8hbnZyNi97b/8wapYaIF9+t9GmZKBW2vunaOc3h9HGJptH7b7XpvZqOTBSm/MpTjr7H497BlgOaSfLUdhmy2bw=="],
+
+    "@oxc-resolver/binding-openharmony-arm64": ["@oxc-resolver/binding-openharmony-arm64@11.24.2", "", { "os": "none", "cpu": "arm64" }, "sha512-MvyGik3a6pVgZ0t/kWlbmFxFLmXQJwgLsY2eYFHLpy0wGwRbfzeIGgDwQ3kXqE30z+kSXennRkCrT7TUvkptNg=="],
+
+    "@oxc-resolver/binding-wasm32-wasi": ["@oxc-resolver/binding-wasm32-wasi@11.24.2", "", { "dependencies": { "@emnapi/core": "1.11.2", "@emnapi/runtime": "1.11.2", "@napi-rs/wasm-runtime": "^1.1.6" }, "cpu": "none" }, "sha512-vHcssMPwO08RTvj/c0iOBz90attxyG3wQJ0dTcyEQK43LRpcdLWZlV5feBhv6Isn6ahbQIzHbCgfa81+RiML0Q=="],
+
+    "@oxc-resolver/binding-win32-arm64-msvc": ["@oxc-resolver/binding-win32-arm64-msvc@11.24.2", "", { "os": "win32", "cpu": "arm64" }, "sha512-uokJqro2iBqkFvJdKQLP7d8/BUmFwESQFVmIJUQKj1Xn1a/LysJoe1vmeECLF5b3jsV8CAL5sEMJXX6SdK9Nhg=="],
+
+    "@oxc-resolver/binding-win32-x64-msvc": ["@oxc-resolver/binding-win32-x64-msvc@11.24.2", "", { "os": "win32", "cpu": "x64" }, "sha512-UqGPmo56KDfLlfXFAFIrNflHT8tFxWGEivWg3Zeyp4Uy2NlKN1FGPr6/BxcLGG3+kZ6Wp14g5Uj+n71boqZfiw=="],
+
     "@playwright/test": ["@playwright/test@1.64.1", "", { "dependencies": { "playwright": "1.64.1" }, "bin": { "playwright": "cli.js" } }, "sha512-IaYGml/nSOiZWROfPtuIL7neuu9qDOZ3TNvNljUIrhDMxiGTgPjzj/g9p9RxpS2tSepPDRY+UwAaEeiKtUvIAg=="],
 
     "@protobufjs/aspromise": ["@protobufjs/aspromise@1.1.2", "", {}, "sha512-j+gKExEuLmKwvz3OgROXtrJ2UG2x8Ch2YZUxahh+s1F2HZ+wAceUNLkvy6zKCPVRkU++ZWQrdxsUeQXmcg4uoQ=="],
@@ -319,6 +402,8 @@
 
     "@testcontainers/postgresql": ["@testcontainers/postgresql@12.2.1", "", { "dependencies": { "testcontainers": "^12.2.1" } }, "sha512-MIbI5KjZ9M4SY4+xzxg/w4ZLBeV+Jd6ognXoWn7dh/mhIhBbn7ss0MiZHNg2XbCbu03BW9YQ9+H9xW8PFkJWaA=="],
 
+    "@tybys/wasm-util": ["@tybys/wasm-util@0.10.4", "", { "dependencies": { "tslib": "^2.4.0" } }, "sha512-W3c4gRigFS0T/Ma4qIYF3GDAc5AQdHb1yL5znJT1Zv1YaD9Kitx656wBjvr19qbiosmZT8lWDM5BEMynUqX65A=="],
+
     "@types/chai": ["@types/chai@5.2.3", "", { "dependencies": { "@types/deep-eql": "*", "assertion-error": "^2.0.1" } }, "sha512-Mw558oeA9fFbv65/y4mHtXDs9bPnFMZAL/jxdPFUpOHHIXX91mcgEHbS5Lahr+pwZFR8A7GQleRWeI6cGFC2UA=="],
 
     "@types/debug": ["@types/debug@4.1.13", "", { "dependencies": { "@types/ms": "*" } }, "sha512-KSVgmQmzMwPlmtljOomayoR89W4FynCAi3E8PPs7vmDVPe84hT+vGPKkJfThkmXs0x0jAaa9U8uW8bbfyS2fWw=="],
@@ -593,10 +678,14 @@
 
     "fast-sha256": ["fast-sha256@1.3.0", "", {}, "sha512-n11RGP/lrWEFI/bWdygLxhI+pVeo1ZYIVwvvPkW7azl/rOy+F3HYRZ2K5zeE9mmkhQppyv9sQFx0JM9UabnpPQ=="],
 
+    "fd-package-json": ["fd-package-json@2.0.0", "", { "dependencies": { "walk-up-path": "^4.0.0" } }, "sha512-jKmm9YtsNXN789RS/0mSzOC1NUq9mkVd65vbSSVsKdjGvYXBuE4oWe2QOEoFeRmJg+lPuZxpmrfFclNhoRMneQ=="],
+
     "fdir": ["fdir@6.5.0", "", { "peerDependencies": { "picomatch": "^3 || ^4" }, "optionalPeers": ["picomatch"] }, "sha512-tIbYtZbucOs0BRGqPJkshJUYdL+SDH7dVM8gjy+ERp3WAUjLEFJE+02kanyHtwjWOnwrKYBiwAmM0p4kLJAnXg=="],
 
     "feed": ["feed@6.0.0", "", { "dependencies": { "xml-js": "^1.6.11" } }, "sha512-rvFOF1POce0ijAKy3tZN5T8PuprgIit/VbMyXJWcoYwcMOTSIJ7NqZb8DTLPJr77yiEO27kidm/fw0kcSIV+ww=="],
 
+    "formatly": ["formatly@0.11.4", "", { "dependencies": { "fd-package-json": "^2.0.0", "package-manager-detector": "^1.8.0" }, "bin": { "formatly": "bin/index.mjs" } }, "sha512-TeCC10lP8KCgoX+Fe5lryILIT0/Dy+nP0OSVnsuB5CwXoLuOdqxCYlPFF1inR8S/zTy1ec7TjhS2TeRKWzzImA=="],
+
     "fs-constants": ["fs-constants@1.0.0", "", {}, "sha512-y6OAwoSIf7FyjMIv94u+b5rdheZEjzR63GTyZJm5qh4Bi+2YgwLCcI/fPFZkL5PSixOt6ZNKm+w+Hfp/Bciwow=="],
 
     "fsevents": ["fsevents@2.3.3", "", { "os": "darwin" }, "sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw=="],
@@ -607,6 +696,8 @@
 
     "get-stream": ["get-stream@6.0.1", "", {}, "sha512-ts6Wi+2j3jQjqi70w5AlN8DFnkSwC+MqmxEzdEALB2qXZYV3X/b1CTfgPLGJNMeAWxdPfU8FO1ms3NUfaHCPYg=="],
 
+    "get-tsconfig": ["get-tsconfig@4.14.3", "", { "dependencies": { "resolve-pkg-maps": "^1.0.0" } }, "sha512-++QEw4DIY7WGoukz+/+A/8dGYPT9l9yIadnmSgZ8Rjr3YVSVDipQSO9CdnJo9ePqFqUUqh+wk9uIaoiAwsiPkA=="],
+
     "glob": ["glob@14.0.2", "", { "dependencies": { "minimatch": "^11.0.0", "minipass": "^7.1.3", "path-scurry": "^3.0.0" } }, "sha512-vfMgTR2djMHPUchsJMLpZlYQvtjVL+mHpEr5wPpoCbQs2vr/FBNK+3Gnl9Ara1DSs4Aeg4eG9HiADb5/rkY/ZA=="],
 
     "graceful-fs": ["graceful-fs@4.2.11", "", {}, "sha512-RbJ5/jmFcNNCcDV5o9eTnBLJ/HszWV0P73bc+Ff4nS/rJj+YaS6IGyiOL0VoBYX+l1Wrl3k63h/KrH+nhJ0XvQ=="],
@@ -663,10 +754,14 @@
 
     "isexe": ["isexe@2.0.0", "", {}, "sha512-RHxMLp9lnKHGHRng9QFhRCMbYAcVpn69smSGcq3f36xjgVVWThj4qqLbTLlq7Ssj8B+fIQ1EuCEGI2lKsyQeIw=="],
 
+    "jiti": ["jiti@2.7.0", "", { "bin": { "jiti": "lib/jiti-cli.mjs" } }, "sha512-AC/7JofJvZGrrneWNaEnJeOLUx+JlGt7tNa0wZiRPT4MY1wmfKjt2+6O2p2uz2+skll8OZZmJMNqeke7kKbNgQ=="],
+
     "jose": ["jose@5.10.0", "", {}, "sha512-s+3Al/p9g32Iq+oqXxkW//7jk2Vig6FF1CFqzVXoTUXt2qz89YWbL+OwS17NFYEvxC35n0FKeGO2LGYSxeM2Gg=="],
 
     "jsdom": ["jsdom@30.1.3", "", { "dependencies": { "@asamuzakjp/css-color": "^7.1.3", "@asamuzakjp/dom-selector": "^10.0.3", "@bramus/specificity": "^2.4.2", "@csstools/css-syntax-patches-for-csstree": "^1.1.15", "@exodus/bytes": "^1.16.0", "css-tree": "^3.2.1", "data-urls": "^8.0.0", "decimal.js": "^10.6.0", "html-encoding-sniffer": "^7.0.0", "is-potential-custom-element-name": "^1.0.1", "lru-cache": "^11.5.3", "parse5": "^8.0.1", "saxes": "^6.0.0", "tough-cookie": "^6.0.2", "undici": "^8.12.1", "w3c-xmlserializer": "^6.0.0", "webidl-conversions": "^8.0.1", "whatwg-mimetype": "^5.0.0", "whatwg-url": "^17.2.0", "xml-name-validator": "^5.0.0" }, "peerDependencies": { "canvas": "^3.2.3" }, "optionalPeers": ["canvas"] }, "sha512-hQMUPvRgN7KxsfIytDQji7bimuJeRQa6Qo5+iuiZQk5CafeRxLIA10/cG5YCBFNpD9RO3oqIiN4CO1Y44kxqXg=="],
 
+    "knip": ["knip@6.43.0", "", { "dependencies": { "formatly": "^0.11.4", "get-tsconfig": "4.14.3", "jiti": "^2.7.0", "oxc-parser": "^0.155.0", "oxc-resolver": "11.24.2", "picomatch": "^4.0.7", "smol-toml": "^1.9.0", "strip-json-comments": "5.0.3", "tinyglobby": "^0.2.17", "unbash": "^6.0.1", "yaml": "^2.9.1", "zod": "^4.6.5" }, "bin": { "knip": "bin/knip.js", "knip-bun": "bin/knip-bun.js" } }, "sha512-8l3cCOg/EXoILO0qcSoMra49yQM91+lEIR4fu5Ko8rrArGX8xKdKZiGI9psPiY6rhLmfLERcMfFEByF0wli5CA=="],
+
     "lazystream": ["lazystream@1.0.1", "", { "dependencies": { "readable-stream": "^2.0.5" } }, "sha512-b94GiNHQNy6JNTrt5w6zNyffMrNkXZb3KTkCZJb2V1xaEGCk093vkZ2jk3tpaeP33/OiXC+WvK9AxUebnf5nbw=="],
 
     "lightningcss": ["lightningcss@1.33.0", "", { "dependencies": { "detect-libc": "^2.0.3" }, "optionalDependencies": { "lightningcss-android-arm64": "1.33.0", "lightningcss-darwin-arm64": "1.33.0", "lightningcss-darwin-x64": "1.33.0", "lightningcss-freebsd-x64": "1.33.0", "lightningcss-linux-arm-gnueabihf": "1.33.0", "lightningcss-linux-arm64-gnu": "1.33.0", "lightningcss-linux-arm64-musl": "1.33.0", "lightningcss-linux-x64-gnu": "1.33.0", "lightningcss-linux-x64-musl": "1.33.0", "lightningcss-win32-arm64-msvc": "1.33.0", "lightningcss-win32-x64-msvc": "1.33.0" } }, "sha512-WkUDrojuJs0xkgGf2udWxa3yGBRxPtxUkB79i6aCZLRgc7PM8fZe9TosfPDcvEpQZbuFASnHYmRLBLUbmLOIIA=="],
@@ -823,6 +918,12 @@
 
     "os-paths": ["os-paths@4.4.0", "", {}, "sha512-wrAwOeXp1RRMFfQY8Sy7VaGVmPocaLwSFOYCGKSyo8qmJ+/yaafCl5BCA1IQZWqFSRBrKDYFeR9d/VyQzfH/jg=="],
 
+    "oxc-parser": ["oxc-parser@0.155.0", "", { "dependencies": { "@oxc-project/types": "^0.155.0" }, "optionalDependencies": { "@oxc-parser/binding-android-arm-eabi": "0.155.0", "@oxc-parser/binding-android-arm64": "0.155.0", "@oxc-parser/binding-darwin-arm64": "0.155.0", "@oxc-parser/binding-darwin-x64": "0.155.0", "@oxc-parser/binding-freebsd-x64": "0.155.0", "@oxc-parser/binding-linux-arm-gnueabihf": "0.155.0", "@oxc-parser/binding-linux-arm-musleabihf": "0.155.0", "@oxc-parser/binding-linux-arm64-gnu": "0.155.0", "@oxc-parser/binding-linux-arm64-musl": "0.155.0", "@oxc-parser/binding-linux-ppc64-gnu": "0.155.0", "@oxc-parser/binding-linux-riscv64-gnu": "0.155.0", "@oxc-parser/binding-linux-riscv64-musl": "0.155.0", "@oxc-parser/binding-linux-s390x-gnu": "0.155.0", "@oxc-parser/binding-linux-x64-gnu": "0.155.0", "@oxc-parser/binding-linux-x64-musl": "0.155.0", "@oxc-parser/binding-openharmony-arm64": "0.155.0", "@oxc-parser/binding-win32-arm64-msvc": "0.155.0", "@oxc-parser/binding-win32-ia32-msvc": "0.155.0", "@oxc-parser/binding-win32-x64-msvc": "0.155.0" } }, "sha512-C/ReSf1JUFukK/zvk6jhcNibSssvas5+ktIzK7fbKVd3CedWe59C3QwHEOrEZj/4Rt9+xg0Jeis/Jv1F/KM1mw=="],
+
+    "oxc-resolver": ["oxc-resolver@11.24.2", "", { "optionalDependencies": { "@oxc-resolver/binding-android-arm-eabi": "11.24.2", "@oxc-resolver/binding-android-arm64": "11.24.2", "@oxc-resolver/binding-darwin-arm64": "11.24.2", "@oxc-resolver/binding-darwin-x64": "11.24.2", "@oxc-resolver/binding-freebsd-x64": "11.24.2", "@oxc-resolver/binding-linux-arm-gnueabihf": "11.24.2", "@oxc-resolver/binding-linux-arm-musleabihf": "11.24.2", "@oxc-resolver/binding-linux-arm64-gnu": "11.24.2", "@oxc-resolver/binding-linux-arm64-musl": "11.24.2", "@oxc-resolver/binding-linux-ppc64-gnu": "11.24.2", "@oxc-resolver/binding-linux-riscv64-gnu": "11.24.2", "@oxc-resolver/binding-linux-riscv64-musl": "11.24.2", "@oxc-resolver/binding-linux-s390x-gnu": "11.24.2", "@oxc-resolver/binding-linux-x64-gnu": "11.24.2", "@oxc-resolver/binding-linux-x64-musl": "11.24.2", "@oxc-resolver/binding-openharmony-arm64": "11.24.2", "@oxc-resolver/binding-wasm32-wasi": "11.24.2", "@oxc-resolver/binding-win32-arm64-msvc": "11.24.2", "@oxc-resolver/binding-win32-x64-msvc": "11.24.2" } }, "sha512-FY91FiDBj7ls5MsFS9jN3tjz2o0/zsdSsymlakySaBwVJZorHhkWyICLZMKxlu1R9vYo+sd3z1jwb4J8x7bNDw=="],
+
+    "package-manager-detector": ["package-manager-detector@1.9.0", "", {}, "sha512-zAMfbta9nPA8AKkA4WdmNAT8R8s6Dk0/xwPsqNnRidMFcLo1YkLuPDTgs2f64XdzS8vbLNnoJ+uUIkgbz7oRHA=="],
+
     "parse-entities": ["parse-entities@4.0.2", "", { "dependencies": { "@types/unist": "^2.0.0", "character-entities-legacy": "^3.0.0", "character-reference-invalid": "^2.0.0", "decode-named-character-reference": "^1.0.0", "is-alphanumerical": "^2.0.0", "is-decimal": "^2.0.0", "is-hexadecimal": "^2.0.0" } }, "sha512-GG2AQYWoLgL877gQIKeRPGO1xF9+eG1ujIb5soS5gPvLQ1y2o8FL90w2QWNdf9I361Mpp7726c+lj3U0qK1uGw=="],
 
     "parse-numeric-range": ["parse-numeric-range@1.3.0", "", {}, "sha512-twN+njEipszzlMJd4ONUYgSfZPDxgHhT9Ahed5uTigpQn90FggW4SA/AIPq/6a149fTbE9qBEcSwE3FAEp6wQQ=="],
@@ -925,6 +1026,8 @@
 
     "resend": ["resend@6.34.1", "", { "dependencies": { "postal-mime": "2.7.6", "standardwebhooks": "1.1.1" }, "peerDependencies": { "@react-email/render": "*" }, "optionalPeers": ["@react-email/render"] }, "sha512-3jo/j1WAW7CBkE6pzK4qLjZCfHRLIhY3ph3x/wzU+MN51cSw3EtReGce8S1cA1R0ipNDOdFYU5Lmt5r563lvYw=="],
 
+    "resolve-pkg-maps": ["resolve-pkg-maps@1.0.0", "", {}, "sha512-seS2Tj26TBVOC2NIc2rOe2y2ZO7efxITtLZcGSOnHHNOQ7CkiUBfw0Iw2ck6xkIhPwLhKNLS8BO+hEpngQlqzw=="],
+
     "retry": ["retry@0.12.0", "", {}, "sha512-9LkiTwjUh6rT555DtE9rTX+BKByPfrMzEAtnlEtdEwr3Nkffwiihqe2bWADg+OQRjt9gl6ICdmB/ZFDCGAtSow=="],
 
     "rolldown": ["rolldown@1.2.15", "", { "dependencies": { "@oxc-project/types": "=0.155.0", "@rolldown/pluginutils": "^1.0.0" }, "optionalDependencies": { "@rolldown/binding-android-arm-eabi": "1.2.15", "@rolldown/binding-android-arm64": "1.2.15", "@rolldown/binding-darwin-arm64": "1.2.15", "@rolldown/binding-darwin-x64": "1.2.15", "@rolldown/binding-freebsd-x64": "1.2.15", "@rolldown/binding-linux-arm-gnueabihf": "1.2.15", "@rolldown/binding-linux-arm64-gnu": "1.2.15", "@rolldown/binding-linux-arm64-musl": "1.2.15", "@rolldown/binding-linux-ppc64-gnu": "1.2.15", "@rolldown/binding-linux-s390x-gnu": "1.2.15", "@rolldown/binding-linux-x64-gnu": "1.2.15", "@rolldown/binding-linux-x64-musl": "1.2.15", "@rolldown/binding-openharmony-arm64": "1.2.15", "@rolldown/binding-win32-arm64-msvc": "1.2.15", "@rolldown/binding-win32-x64-msvc": "1.2.15" }, "bin": { "rolldown": "./bin/cli.mjs" } }, "sha512-6odND+fel5zVw3I4Yc2e69gvguDnX0CAAGiNDZSq4ik5WUcaLrkD2GLuog0XcODbor31hZ5ayEMgVDno+KPV5g=="],
@@ -951,6 +1054,8 @@
 
     "signal-exit": ["signal-exit@3.0.7", "", {}, "sha512-wnD2ZE+l+SPC/uoS0vXeE9L1+0wuaMqKlfz9AMUo38JsyLSBWSFcHR1Rri62LZc12vLr1gb3jl7iwQhgwpAbGQ=="],
 
+    "smol-toml": ["smol-toml@1.9.1", "", {}, "sha512-j7WyPdf0CJoutMzMoPLF/bVXHtKZIT9Rb4eGeEbWw8X2t5oirjPgpL+OpaENZrILYaXqYwnVH+qgUwVbl+pUJQ=="],
+
     "source-map": ["source-map@0.7.6", "", {}, "sha512-i5uvt8C3ikiWeNZSVZNWcfZPItFQOsYTUAOkcUPGd8DqDy1uOUikjt5dG+uRlwyvR108Fb9DOd4GvXfT0N2/uQ=="],
 
     "source-map-js": ["source-map-js@1.2.2", "", {}, "sha512-KGj/8Y43x35aZVDtt+J4mK1hoLGHULMYfSkODJNQjNDC3oW1PqPoxMwo0pLUsWM/UEGzON/NxeHywEfNXNP3Vw=="],
@@ -983,6 +1088,8 @@
 
     "strip-final-newline": ["strip-final-newline@2.0.0", "", {}, "sha512-BrpvfNAE3dcvq7ll3xVumzjKjZQ5tI1sEUIKr3Uoks0XUl45St3FlatVqef9prk4jRDzhW6WZg+3bk93y6pLjA=="],
 
+    "strip-json-comments": ["strip-json-comments@5.0.3", "", {}, "sha512-1tB5mhVo7U+ETBKNf92xT4hrQa3pm0MZ0PQvuDnWgAAGHDsfp4lPSpiS6psrSiet87wyGPh9ft6wmhOMQ0hDiw=="],
+
     "style-to-js": ["style-to-js@1.1.21", "", { "dependencies": { "style-to-object": "1.0.14" } }, "sha512-RjQetxJrrUJLQPHbLku6U/ocGtzyjbJMP9lCNK7Ag0CNh690nSH8woqWH9u16nMjYBAok+i7JO1NP2pOy8IsPQ=="],
 
     "style-to-object": ["style-to-object@1.0.14", "", { "dependencies": { "inline-style-parser": "0.2.7" } }, "sha512-LIN7rULI0jBscWQYaSswptyderlarFkjQ+t79nzty8tcIAceVomEVlLzH5VP4Cmsv6MtKhs7qaAiwlcp+Mgaxw=="],
@@ -1029,6 +1136,8 @@
 
     "typescript": ["typescript@7.0.2", "", { "optionalDependencies": { "@typescript/typescript-aix-ppc64": "7.0.2", "@typescript/typescript-darwin-arm64": "7.0.2", "@typescript/typescript-darwin-x64": "7.0.2", "@typescript/typescript-freebsd-arm64": "7.0.2", "@typescript/typescript-freebsd-x64": "7.0.2", "@typescript/typescript-linux-arm": "7.0.2", "@typescript/typescript-linux-arm64": "7.0.2", "@typescript/typescript-linux-loong64": "7.0.2", "@typescript/typescript-linux-mips64el": "7.0.2", "@typescript/typescript-linux-ppc64": "7.0.2", "@typescript/typescript-linux-riscv64": "7.0.2", "@typescript/typescript-linux-s390x": "7.0.2", "@typescript/typescript-linux-x64": "7.0.2", "@typescript/typescript-netbsd-arm64": "7.0.2", "@typescript/typescript-netbsd-x64": "7.0.2", "@typescript/typescript-openbsd-arm64": "7.0.2", "@typescript/typescript-openbsd-x64": "7.0.2", "@typescript/typescript-sunos-x64": "7.0.2", "@typescript/typescript-win32-arm64": "7.0.2", "@typescript/typescript-win32-x64": "7.0.2" }, "bin": { "tsc": "bin/tsc" } }, "sha512-8FYau96o3NKOhbjKi/qNvG/W5jhzxkbdm5sj9AbZ/5T5sWqn3hJgLfGx27sRKZWTvyzCP8dLRBTf5tBTSRVUNA=="],
 
+    "unbash": ["unbash@6.0.1", "", {}, "sha512-0db9eS5iqybux41zLkX69nk90KTci7F7eZ+gXzEG/Q7E0tAqEBhRh5fkZvk1N7jT7QkGWqq34i8SFGPFEe1V8A=="],
+
     "undici": ["undici@8.12.3", "", {}, "sha512-+fdndUTwBP86cVjihTp21hZHo7d6oj1c/47XPA3lL8mM0XHs+C4EkcjmgRsFnFk2f/UONGDy9ItBItmXsLOQHw=="],
 
     "undici-types": ["undici-types@8.9.0", "", {}, "sha512-KTDyRTYX8sWmKXAikPHHSyc63CRPETMctyjKFupcC6OBLXT3xsN0e9aF7m+mIXutFWpUXuedtowG7iLOzp0kQg=="],
@@ -1063,6 +1172,8 @@
 
     "w3c-xmlserializer": ["w3c-xmlserializer@6.0.0", "", { "dependencies": { "xml-name-validator": "^5.0.0" } }, "sha512-4Nsy8K5Tr6SPDH9jhKJOHf7ChDrc1zufZTVSF7x72hwuEXBqxqk9G6cK+K2NRUtB3iELRJqjXb4JPDMBjMTl2Q=="],
 
+    "walk-up-path": ["walk-up-path@4.0.0", "", {}, "sha512-3hu+tD8YzSLGuFYtPRb48vdhKMi0KQV5sn+uWr8+7dMEq/2G/dtLrdDinkLjqq5TIbIBjYJ4Ax/n3YiaW7QM8A=="],
+
     "web-namespaces": ["web-namespaces@2.0.1", "", {}, "sha512-bKr1DkiNa2krS7qxNtdrtHAmzuYGFQLiQ13TsorsdT6ULTkPLKuu5+GsFpDlg6JFjUTwX2DyhMPG2be8uPrqsQ=="],
 
     "webidl-conversions": ["webidl-conversions@8.0.1", "", {}, "sha512-BMhLD/Sw+GbJC21C/UgyaZX41nPt8bUTg+jWyDeg7e7YN4xOM05YPSIXceACnXVtqyEw/LMClUQMtMZ+PGGpqQ=="],
@@ -1107,6 +1218,8 @@
 
     "@grpc/grpc-js/@grpc/proto-loader": ["@grpc/proto-loader@0.8.1", "", { "dependencies": { "lodash.camelcase": "^4.3.0", "long": "^5.0.0", "protobufjs": "^7.5.5", "yargs": "^17.7.2" }, "bin": { "proto-loader-gen-types": "build/bin/proto-loader-gen-types.js" } }, "sha512-wtF6h+DY6M3YaDBPAmvuuA6jV8Sif9MjtOI5euKFWRgCDl5PeDpPsHR9u2l6St5ceY8AZgoNDww5+HvEsXFsGg=="],
 
+    "@img/sharp-wasm32/@emnapi/runtime": ["@emnapi/runtime@1.11.3", "", { "dependencies": { "tslib": "^2.4.0" } }, "sha512-Xz4Tpyki7XyrpbUK1jR1AhdAdaXyhhY4lZ3neLodmhpuWfy2PAQN5B46sAiU4liOXGLkHypn/qU+jvfWSCYYLA=="],
+
     "@types/ssh2/@types/node": ["@types/node@18.19.130", "", { "dependencies": { "undici-types": "~5.26.4" } }, "sha512-GRaXQx6jGfL8sKfaIDD6OupbIHBr9jv7Jnaml9tB7l4v068PAOXqfcujMMo5PhbIs6ggR1XODELqahT2R8v0fg=="],
 
     "bl/buffer": ["buffer@5.7.1", "", { "dependencies": { "base64-js": "^1.3.1", "ieee754": "^1.1.13" } }, "sha512-EHcyIPBQ4BSGlvjB16k5KgAJ27CIsHY/2JBmCRReo48y9rQ3MaUzWX3KVlBa4U7MyX02HdVj0K7C3WaB3ju7FQ=="],
diff --git a/knip.json b/knip.json
new file mode 100644
index 00000000..485204aa
--- /dev/null
+++ b/knip.json
@@ -0,0 +1,13 @@
+{
+  "$schema": "./node_modules/knip/schema.json",
+  "entry": [
+    "lighthouserc.cjs",
+    "velite.config.ts",
+    "src/bench/styles/postcss.config.mjs",
+    "scripts/*.{ts,mjs}",
+    "scripts/parity/**/*.{ts,mjs}"
+  ],
+  "ignore": ["src/vendor/**"],
+  "ignoreDependencies": ["server-only"],
+  "ignoreBinaries": ["uv"]
+}
diff --git a/package.json b/package.json
index aa710578..508ccbf5 100644
--- a/package.json
+++ b/package.json
@@ -18,6 +18,7 @@
     "check": "biome check --write",
     "check:ci": "biome check",
     "typecheck": "tsc --noEmit",
+    "knip": "knip",
     "verify": "bun scripts/verify.ts",
     "test": "bun test tests/unit",
     "test:bench": "vitest run",
@@ -52,6 +53,7 @@
     "@types/react": "^19.3.0",
     "@types/react-dom": "^19.3.0",
     "jsdom": "^30.1.2",
+    "knip": "^6.43.0",
     "typescript": "^7.0.2",
     "vite": "^8.3.4",
     "vitest": "^5.0.4"
diff --git a/src/bench/lib/base-path.ts b/src/bench/lib/base-path.ts
index 674d7bf5..f0628e08 100644
--- a/src/bench/lib/base-path.ts
+++ b/src/bench/lib/base-path.ts
@@ -18,10 +18,10 @@
  */
 
 /** The host that serves bench from the root. */
-export const BENCH_HOST = 'bench.vortex.dev';
+const BENCH_HOST = 'bench.vortex.dev';
 
 /** The path bench's routes live under on every other host. */
-export const BENCH_PREFIX = '/bench';
+const BENCH_PREFIX = '/bench';
 
 /** The prefix of bench's paths: none on its own host, `/bench` elsewhere. */
 export type BenchBase = '' | typeof BENCH_PREFIX;
diff --git a/src/bench/lib/branch.ts b/src/bench/lib/branch.ts
index 5d0cf902..5eeec320 100644
--- a/src/bench/lib/branch.ts
+++ b/src/bench/lib/branch.ts
@@ -6,7 +6,7 @@
  * `commits.branch`; reads see only this branch's commits, so numbers measured on
  * any other branch never reach a chart, a summary, or a commit window.
  */
-export const READ_BRANCH = 'develop';
+const READ_BRANCH = 'develop';
 
 if (!/^[A-Za-z0-9._/-]+$/.test(READ_BRANCH)) {
   throw new Error(`READ_BRANCH is spliced into SQL and must be a plain branch name`);
diff --git a/src/bench/lib/chart-format.ts b/src/bench/lib/chart-format.ts
index 08b70886..ddbd7125 100644
--- a/src/bench/lib/chart-format.ts
+++ b/src/bench/lib/chart-format.ts
@@ -1079,7 +1079,7 @@ export function seedActiveFromAllowlist(
  * `lance` is excluded by default: its benchmarks run far slower than the other
  * formats, so leaving it on dominates the y-axis and buries the comparison.
  */
-export const DEFAULT_HIDDEN_FORMATS: readonly string[] = ['lance'];
+const DEFAULT_HIDDEN_FORMATS: readonly string[] = ['lance'];
 
 /**
  * Seed the active FORMAT chips from a URL allowlist. An explicit allowlist is
diff --git a/src/bench/lib/families.ts b/src/bench/lib/families.ts
index 18540c5b..9f8eb8a0 100644
--- a/src/bench/lib/families.ts
+++ b/src/bench/lib/families.ts
@@ -15,7 +15,7 @@
  */
 
 /** The five fact-table names, spelled exactly as in `migrations/001`. */
-export type FamilyTable =
+type FamilyTable =
   | 'query_measurements'
   | 'compression_times'
   | 'compression_sizes'
diff --git a/src/bench/lib/headline.ts b/src/bench/lib/headline.ts
index 2821903e..a08bd4ca 100644
--- a/src/bench/lib/headline.ts
+++ b/src/bench/lib/headline.ts
@@ -18,9 +18,9 @@
 import { displayFormat } from '@/bench/lib/chart-format';
 import type { SeriesRanking, Summary } from '@/bench/lib/summary';
 
-export type HeadlineTone = 'better' | 'worse' | 'same' | 'neutral';
+type HeadlineTone = 'better' | 'worse' | 'same' | 'neutral';
 
-export interface HeadlinePart {
+interface HeadlinePart {
   text: string;
   tone: HeadlineTone;
 }
diff --git a/src/bench/lib/queries.ts b/src/bench/lib/queries.ts
index 2807914a..ae8b463b 100644
--- a/src/bench/lib/queries.ts
+++ b/src/bench/lib/queries.ts
@@ -1140,7 +1140,7 @@ export interface GroupsResponse {
  * with the full [`ChartResponse`] payload flattened in at the same level,
  * matching the Rust `#[serde(flatten)]` on `NamedChartResponse.chart`.
  */
-export type NamedChartResponse = ChartResponse & {
+type NamedChartResponse = ChartResponse & {
   name: string;
   slug: string;
 };
diff --git a/src/bench/lib/site-files.ts b/src/bench/lib/site-files.ts
index 67f5e1be..36880f8a 100644
--- a/src/bench/lib/site-files.ts
+++ b/src/bench/lib/site-files.ts
@@ -50,7 +50,7 @@ export function chartUrl(slug: string): string {
 }
 
 /** A value in its unit, as `12.34 ms`, `1.21 GB`, `850 MB/s`. */
-export function formatValue(value: number, unitKind: UnitKind): string {
+function formatValue(value: number, unitKind: UnitKind): string {
   switch (unitKind) {
     case 'time_ns':
       return formatTimeNs(value);
diff --git a/src/bench/lib/summary.ts b/src/bench/lib/summary.ts
index 1ecf3834..0b200262 100644
--- a/src/bench/lib/summary.ts
+++ b/src/bench/lib/summary.ts
@@ -116,11 +116,8 @@ export interface SeriesRanking {
   total: number;
 }
 
-/** @deprecated Prefer [`SeriesRanking`]; kept as the historical spelling. */
-export type QueryRanking = SeriesRanking;
-
 /** One format and operation in the compression throughput summary. */
-export interface CompressionRanking {
+interface CompressionRanking {
   /** On-disk format. */
   name: string;
   /** Compression operation. */
@@ -132,7 +129,7 @@ export interface CompressionRanking {
 }
 
 /** One format in the compression size summary. */
-export interface CompressionSizeRanking {
+interface CompressionSizeRanking {
   /** On-disk format. */
   name: string;
   /** Minimum size ratio to Parquet across datasets. */
diff --git a/src/bench/lib/test-harness.ts b/src/bench/lib/test-harness.ts
index ffc82ad6..0a3bf126 100644
--- a/src/bench/lib/test-harness.ts
+++ b/src/bench/lib/test-harness.ts
@@ -240,7 +240,7 @@ export async function startBenchDatabase(
 // The canonical web UI fixture contains three oldest-first commits. Vortex and
 // Parquet occur on each commit. Lance occurs only on the oldest commit to test
 // its sparse cadence. Each commit adds a bias to keep other series non-flat.
-export const COMMITS: ReadonlyArray<readonly [string, string, string]> = [
+const COMMITS: ReadonlyArray<readonly [string, string, string]> = [
   ['1'.repeat(40), '2026-04-23T12:00:00Z', 'first commit'],
   ['2'.repeat(40), '2026-04-24T12:00:00Z', 'second commit'],
   ['3'.repeat(40), '2026-04-25T12:00:00Z', 'third commit'],
diff --git a/src/bench/lib/window.ts b/src/bench/lib/window.ts
index cde5dda1..dbeaf7f0 100644
--- a/src/bench/lib/window.ts
+++ b/src/bench/lib/window.ts
@@ -83,7 +83,7 @@ export function commitWindowLimit(window: CommitWindow): number | null {
 }
 
 /** The canonical `?n=` spelling of a window: `all`, or the rung it snapped to. */
-export function windowParam(window: CommitWindow): string {
+function windowParam(window: CommitWindow): string {
   return window.kind === 'all' ? 'all' : String(window.n);
 }
 
diff --git a/src/lib/gpu-result.ts b/src/lib/gpu-result.ts
index 46b755ba..d5c9cab6 100644
--- a/src/lib/gpu-result.ts
+++ b/src/lib/gpu-result.ts
@@ -30,18 +30,24 @@ import { geomean } from "./geomean";
  * screen-reader text. If cuDF gains a Lance integration, give Lance its times in
  * the table and a row computed like Vortex's.
  */
-export const PARQUET_CONFIGS = [
+const PARQUET_CONFIGS = [
   "PyArrow, zstd(3)",
   "PyArrow, Snappy",
   "cuDF, Snappy, 1M-row groups",
   "cuDF, Snappy, 4M-row groups"
 ] as const;
 
+/** A tuple of times, one for each entry of `T`. */
+type TimesFor<T extends readonly unknown[]> = {
+  readonly [K in keyof T]: number;
+};
+
 /** Mean query time in ms, hot: Vortex, then Parquet in `PARQUET_CONFIGS` order. */
 export const GPU_QUERIES: readonly {
   query: string;
   vortex: number;
-  parquet: readonly [number, number, number, number];
+  /** One time per entry in `PARQUET_CONFIGS`, so the two cannot drift apart. */
+  parquet: TimesFor<typeof PARQUET_CONFIGS>;
 }[] = [
   { query: "Q1", vortex: 32.37, parquet: [106.6, 97.96, 89.87, 82.28] },
   { query: "Q5", vortex: 13.27, parquet: [104.3, 82.99, 69.44, 61.04] },
diff --git a/src/lib/install.ts b/src/lib/install.ts
index 98e717ea..d4d81c8f 100644
--- a/src/lib/install.ts
+++ b/src/lib/install.ts
@@ -2,7 +2,7 @@
 // user-guide/duckdb, user-guide/datafusion and user-guide/spark.
 
 /** One line of a command block. `prompt` is "$" for a shell command, else "". */
-export type InstallLine = { prompt: string; text: string };
+type InstallLine = { prompt: string; text: string };
 
 export type InstallTab = { key: string; label: string; lines: InstallLine[] };
 
diff --git a/src/lib/llms.ts b/src/lib/llms.ts
index 72964863..757f00dd 100644
--- a/src/lib/llms.ts
+++ b/src/lib/llms.ts
@@ -5,7 +5,7 @@ import { copyText, installTabs } from "@/lib/install";
 import { resultsRow, resultsSystems } from "@/vendor/vortex-design/results.js";
 
 // What the homepage says Vortex is, for llms.txt and the structured data.
-export const SUMMARY =
+const SUMMARY =
   "Vortex is an open-source columnar file format for fast scans, random access, and compression, with Rust, Python, DuckDB, DataFusion, and Spark support. It is an Apache-2.0 project of the Linux Foundation.";
 
 const REPO = "https://github.com/vortex-data/vortex";
diff --git a/src/lib/rehype-blog.ts b/src/lib/rehype-blog.ts
index 01a2afb4..a3fad7ed 100644
--- a/src/lib/rehype-blog.ts
+++ b/src/lib/rehype-blog.ts
@@ -7,7 +7,7 @@
 
 import { calloutOf } from "../vendor/vortex-design/callout.js";
 
-export interface HastText {
+interface HastText {
   type: "text";
   value: string;
 }
diff --git a/src/lib/theme.ts b/src/lib/theme.ts
index 9a65a3ba..8df1fb10 100644
--- a/src/lib/theme.ts
+++ b/src/lib/theme.ts
@@ -22,8 +22,6 @@ export const THEME = {
   foreground: "#ffffff"
 } as const;
 
-export type ThemeKey = keyof typeof THEME;
-
 export {
   readChoice,
   saveChoice,

From b7c2a0ccf5efb502814975ab49fde255b397b9cd Mon Sep 17 00:00:00 2001
From: Will Manning <will@willmanning.io>
Date: Wed, 4 Nov 2026 02:27:21 -0500
Subject: [PATCH 9/9] Document the three new lint rules and knip

CLAUDE.md now says which rules are on, how tests replace non-null assertions, how a CSS reorder is checked, and where knip's entry points go. The README lists `bun run knip`.

Signed-off-by: Will Manning <will@willmanning.io>
---
 CLAUDE.md | 17 ++++++++++-------
 README.md |  3 ++-
 2 files changed, 12 insertions(+), 8 deletions(-)

diff --git a/CLAUDE.md b/CLAUDE.md
index 8e88845a..354fbe10 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -7,6 +7,7 @@ This file provides guidance to Claude Code (claude.ai/code) when working with co
 - `bun run dev` - Start development server with Turbopack
 - `bun run build` - Build production application (a bare `bun build` runs Bun's bundler, not this script)
 - `bun run lint` - Run Biome lint
+- `bun run knip` - Find unused files, exports and dependencies (run `bun run build` first)
 - `bun run start` - Start production server
 
 - `bun run test` - The site's unit tests (`bun test tests/unit`)
@@ -27,7 +28,7 @@ How the two sites share the app:
 - **Root layouts.** Each site has its own, so Next.js has none to draw an unmatched URL's 404 in. `src/app/global-not-found.tsx` (`experimental.globalNotFound`) is the site's 404, in the site's layout, prerendered for every unmatched URL; a catch-all route (`src/app/(bench)/bench/[...notFound]`) keeps bench's unmatched paths in bench's own layout. `robots.ts` stays at the app root, where Next.js reads it; the favicon is `public/favicon.ico`, named in the site's metadata, because the `app/favicon.ico` convention would also put it on bench's pages. Next.js serves a metadata image route inside a route group with a hash suffix (`/opengraph-image-12o0cb`), and the og:image tags name that URL; rewrites in `next.config.mjs` keep the plain `/opengraph-image` URLs (which the posts' JSON-LD names) serving the same images.
 - **Headers.** The CSP and the other security headers in `next.config.mjs` cover both sites: one policy, since both self-host their fonts. bench now sends the site's security headers, including `X-Frame-Options: DENY` and `frame-ancestors 'none'`, so no other site can embed bench's pages in a frame. `vercel.json` holds bench's cron (`/bench/api/health`) and bench's CDN rule for its landing, chart, and methodology pages on bench.vortex.dev (header rules match the path as requested, before the rewrites). bench's HTML differs between its two URL forms, so the `/bench` form gets the CDN rule only outside production (`benchPrefixCdnRules` in `next.config.mjs`): a cached `/bench` page must never answer for bench.vortex.dev.
 - **Toolchain.** One package: one `package.json`, one `bun.lock`, one `bunfig.toml`, one `tsconfig.json`. Next.js 16.4.1, React 19.3 and TypeScript 7. `tsconfig.json` has every strict flag either app had, including bench's `noFallthroughCasesInSwitch` and `noUncheckedSideEffectImports`; `src/css.d.ts` types the CSS side-effect imports. The root `biome.json` lints and formats both sites: an override keeps bench's files (`src/bench`, `src/app/(bench)`, the parity and deploy checks, `vitest.config.ts`) in bench's old Prettier style (single quotes, trailing commas, 100 columns) with bench's lint rules (see "bench" below), and `bun run check:ci` checks all of it. bench's tests run on Vitest from the root `vitest.config.ts`, scoped to bench's files; the site's run on `bun test`. bench's PostCSS config sits beside its stylesheets (`src/bench/styles/postcss.config.mjs`), and Turbopack applies it to those alone: with no config at the root, the site's CSS gets Turbopack's defaults.
-- **CI.** Every check covers both sites and runs on every change; nothing is split by which site a change touches. `ci.yml`'s `Lint, build, verify` runs Biome on the whole repository, one build, the typecheck, the site's unit tests, bench's Vitest suite with its Postgres integration tests (testcontainers, so the runner needs Docker), the migration-runner (`db/tests`), infrastructure (`infra/tests`), parity and deploy-check tests, `bun run verify`, and the Playwright smoke specs. Dependency review, the secret scan, REUSE and the non-blocking `bun audit` run beside it. `links.yml` checks the blog's external links with lychee each week and on a PR that changes `src/content/`; it is not a required check, so a broken link on another site never blocks a merge.
+- **CI.** Every check covers both sites and runs on every change; nothing is split by which site a change touches. `ci.yml`'s `Lint, build, verify` runs Biome on the whole repository, one build, the typecheck, knip, the site's unit tests, bench's Vitest suite with its Postgres integration tests (testcontainers, so the runner needs Docker), the migration-runner (`db/tests`), infrastructure (`infra/tests`), parity and deploy-check tests, `bun run verify`, and the Playwright smoke specs. Dependency review, the secret scan, REUSE and the non-blocking `bun audit` run beside it. `links.yml` checks the blog's external links with lychee each week and on a PR that changes `src/content/`; it is not a required check, so a broken link on another site never blocks a merge.
 - **Lighthouse and axe.** `lighthouse.yml` audits both sites on the pull request's Vercel preview, because bench renders from its database and only a deployment has one. Its jobs run in parallel, each on its own runner, since a second audit or browser on the same CPU would skew Lighthouse's timings. Each one waits for the preview (Vercel's GitHub deployment in the `Preview` environment, through the `.github/actions/preview-proxy` action) and requests its page once to get past the cold start. Five Lighthouse jobs each audit one page, named by `LHCI_PAGE`: `/`, `/blog`, the newest post, `/bench` and one bench chart page (`lighthouserc.cjs` holds the pages, the thresholds and their rationale). The `axe` job runs `tests/a11y.spec.ts` (`--grep @axe`: WCAG 2.1 A and AA, and a serious or critical violation fails). The `report` job, the required check `Lighthouse and axe`, posts one score table on the PR from the Lighthouse jobs' reports and fails unless every job passed. The preview is reached through `scripts/preview-proxy.mjs`, which adds the `VERCEL_AUTOMATION_BYPASS_SECRET` header only to requests for the preview, so no other origin a page loads from sees it. Fork and Dependabot PRs get no secrets, so the jobs are skipped for them, which counts as passing. The smoke run in `ci.yml` leaves the axe specs out (`--grep-invert @axe`). To run axe yourself: `BASE_URL=https://vortex.dev BENCH_URL=https://bench.vortex.dev bunx playwright test --grep @axe`.
 - **Deploys.** The `vortex` Vercel project builds and deploys the app, both sites, through the git integration, on every commit. `bench-verify-deploy.yml` runs `scripts/verify-web-deploy.mjs` on each production deployment Vercel reports, against bench under `/bench` on the deployment's own URL. Schema migrations go through `bench-schema-deploy.yml`, which only runs manually from `main` because the AWS role trusts nothing else.
 
@@ -112,17 +113,19 @@ To see bench as bench.vortex.dev serves it, send its host: `curl -H 'Host: bench
 bench uses Biome, not ESLint or Prettier. The bench override in the root `biome.json` keeps the style bench had under Prettier (single quotes, trailing commas, 100 columns, 2-space indent) for bench's files, and `bun run check:ci` checks bench along with the site. `biome.json` cannot hold comments, so the reasons for each difference from the site's rules are here:
 
 - The site's `a11y` rules apply to bench unchanged. Seven places in existing markup break one of them on purpose, and each carries an inline `biome-ignore` comment that says why: `useAriaPropsSupportedByRole` for `aria-label` on a plain `div` (the header nav controls, the chart toolbar), `useSemanticElements` for `role="group"` on a `div` in the toolbars (a `fieldset` would change their layout), `useFocusableInteractive` for the pointer-driven range strip, and `noNoninteractiveTabindex` for the group info icon, which takes focus so its tooltip shows for keyboard users. New markup follows the rules, or carries its own `biome-ignore` with a reason.
-- `complexity/noImportantStyles` is off: `!important` overrides Chart.js's inline canvas size and the offscreen prebuild layout in `src/bench/styles/globals.css`.
 - `organizeImports` is off: Prettier never sorted bench's imports, and reordering them would rewrite 27 files and could change the order CSS loads in.
 
 Next.js's `core-web-vitals` lint rules have no Biome equivalent; the site accepts that too. Two rules replace bench's old ESLint checks for both sites: `correctness/useExhaustiveDependencies` replaces `react-hooks/exhaustive-deps`, and `suspicious/noExplicitAny` replaces typescript-eslint's `no-explicit-any`. An effect that omits dependencies on purpose carries a `biome-ignore` comment that says why.
 
-Both sites run Biome's recommended rules, with the rules in `biome.json` set to `error` so that `check:ci` fails on them (Biome's default for some is a warning, which does not fail it). Each deliberate exception carries a `biome-ignore` comment with its reason: the inline scripts and JSON-LD (`noDangerouslySetInnerHtml`; `jsonLdScript` escapes `<`), and the two lists whose index is the only key (`noArrayIndexKey`). Four rules stay off. The count is what each would raise on 2026-11-04:
+Both sites run Biome's recommended rules, with the rules in `biome.json` set to `error` so that `check:ci` fails on them (Biome's default for some is a warning, which does not fail it). Each deliberate exception carries a `biome-ignore` comment with its reason: the inline scripts and JSON-LD (`noDangerouslySetInnerHtml`; `jsonLdScript` escapes `<`), and the two lists whose index is the only key (`noArrayIndexKey`). One rule stays off: `performance/noImgElement`, because the logos and marks are SVGs and small PNGs with fixed sizes, which `next/image` would not make smaller.
 
-- `style/noNonNullAssertion` (192, 190 of them in bench, mostly tests). Turn it on file by file, as bench's code changes.
-- `style/noDescendingSpecificity` (13, 12 in `src/bench/styles/globals.css`). Fixing it reorders CSS rules, which can change what wins the cascade, so it needs a visual check of each page.
-- `performance/noImgElement` (5). The logos and marks are SVGs and small PNGs with fixed sizes, which `next/image` would not make smaller.
-- `complexity/noImportantStyles`, for bench only (3; see above).
+Three rules that were off until 2026-11-04 are now on, for both sites:
+
+- `style/noNonNullAssertion`. Production code handles a missing value. Tests use `defined()` from `src/lib/defined.ts`, which throws with a message when a value is null or undefined, in place of `value!`.
+- `style/noDescendingSpecificity`. Moving a CSS rule can change which declaration wins, so a fix that reorders rules needs proof that no element's computed style changes. The proof for the first fix compared every element's computed style on bench's landing, methodology and chart pages, with and without JavaScript, under the old and the new stylesheet.
+- `complexity/noImportantStyles`. Each `!important` carries a `biome-ignore` with its reason: the no-JavaScript rule that hides `[data-requires-js]` controls, and the two that beat Chart.js's inline canvas size, in `src/bench/styles/globals.css`.
+
+knip (`knip.json`) finds unused files, exports and dependencies, and CI fails on any. Entry points that no import reaches (configs, and scripts that CI or a person runs) are listed in `knip.json`; add a new one there. It runs after the build, because it resolves `#site/content` to `.velite/`. Export a symbol only when another file imports it.
 
 ## Licensing
 
diff --git a/README.md b/README.md
index e7247a26..d553406e 100644
--- a/README.md
+++ b/README.md
@@ -29,13 +29,14 @@ bench is at http://localhost:3000/bench. It needs the `BENCH_DB_*` variables for
 | `bun run check` | Biome lint + format + import-organize, with auto-fix |
 | `bun run check:ci` | Biome no-write check — what CI runs |
 | `bun run typecheck` | `tsc --noEmit`. Must run after `bun run build` because velite populates `.velite/` and Next emits `next-env.d.ts` during build |
+| `bun run knip` | Unused files, exports and dependencies. Like `typecheck`, it needs `bun run build` first, for `.velite/` |
 | `bun run test` | The marketing site's unit tests (`bun test tests/unit`) |
 | `bun run test:bench` | bench's tests on Vitest. Its Postgres integration suite needs Docker or `BENCH_TEST_DATABASE_URL`, and skips without either |
 | `bun run verify` | HTTP suite against a running server: sitemap, robots, RSS, OG, canonicals, JSON-LD, theme parity, `/api/subscribe`, internal links |
 | `bun run test:e2e` | Playwright browser smoke (Chromium desktop + WebKit iPhone-13). One-time setup: `bun run test:e2e:install` |
 | `bun run lighthouse` | Local Lighthouse CI run against a server you started, at `BASE_URL` (default `http://localhost:3000`; bench's pages need its `BENCH_DB_*` variables). Fetches a pinned `@lhci/cli` with `bunx`; it is not a dependency |
 
-CI runs `check:ci → build → typecheck → unit and bench tests → start → verify → playwright` for both sites on every PR via [.github/workflows/ci.yml](.github/workflows/ci.yml), with a non-blocking `bun audit`. [.github/workflows/lighthouse.yml](.github/workflows/lighthouse.yml) runs Lighthouse and axe on both sites on the PR's Vercel preview and posts a sticky score table.
+CI runs `check:ci → build → typecheck → knip → unit and bench tests → start → verify → playwright` for both sites on every PR via [.github/workflows/ci.yml](.github/workflows/ci.yml), with a non-blocking `bun audit`. [.github/workflows/lighthouse.yml](.github/workflows/lighthouse.yml) runs Lighthouse and axe on both sites on the PR's Vercel preview and posts a sticky score table.
 
 ## Contributing