handoff pass: vendored sveltia bundle, astro pinned ^7.2.10, root README + refreshed deploy runbook, review fixes (coverless card grid, shared NewsCard/lib, real site origin, nginx security headers, linger step, dead config removed, preview.css sync, tsconfig)

public/search-client.js

@@ -26,7 +26,15 @@
     let index = null;
     let timer;
     async function ensureIndex() {
-      if (!index) index = await (await fetch('/search.json')).json();
+      if (index) return index;
+      try {
+        index = await (await fetch('/search.json')).json();
+      } catch {
+        // Network hiccup: say so instead of failing silently; index stays
+        // null so the next keystroke retries.
+        status.textContent = 'Search is unavailable right now.';
+        return null;
+      }
       return index;
     }
     // First title match wrapped in <mark> (Starlight search pattern) — built
@@ -77,7 +85,9 @@
         frag.append(label('Recent'));
         for (const term of r) frag.append(row([term], '/search?q=' + encodeURIComponent(term), term));
       }
-      const fresh = (await ensureIndex()).slice(0, Math.max(1, 5 - r.length));
+      const idx = await ensureIndex();
+      if (!idx) return;
+      const fresh = idx.slice(0, Math.max(1, 5 - r.length));
       if (input.value.trim().length >= 2) return; // typed meanwhile — run() owns the list
       frag.append(label('Latest news'));
       for (const p of fresh) {
@@ -95,6 +105,7 @@
       const q = input.value.trim().toLowerCase();
       if (q.length < 2) { list.replaceChildren(); idle(); return; }
       const idx = await ensureIndex();
+      if (!idx) { list.replaceChildren(); return; }
       const hits = idx
         .filter((p) => (p.title + ' ' + p.description + ' ' + p.category).toLowerCase().includes(q))
         .slice(0, opts.limit);
@@ -111,6 +122,17 @@
         li.append(small);
         frag.append(li);
       }
+      // Dropdown only: an empty list would collapse (.suggest:empty) and the
+      // panel would just vanish — show the no-results line sighted users too
+      // (the status line above is sr-only in the header; /search shows a
+      // visible notice instead).
+      if (!hits.length && opts.dismiss) {
+        const li = document.createElement('li');
+        li.className = 'suggest-hint';
+        li.setAttribute('aria-hidden', 'true'); // the status line announces it
+        li.textContent = 'No results for “' + input.value.trim() + '”';
+        frag.append(li);
+      }
       list.replaceChildren(frag);
       hint();
     }
@@ -122,13 +144,14 @@
       const a = e.target.closest && e.target.closest('a');
       remember((a && a.dataset.q) || input.value);
     });
-    // Dropdown dismiss (opt-in — /search keeps its results list). A suggestion
-    // list is a NON-MODAL combobox popup (ARIA combobox pattern): interacting
-    // outside the field+list closes it but the interaction is NOT swallowed —
+    // Dropdown dismiss (opt-in — /search keeps its results list). The
+    // suggestion list is a NON-MODAL popup (combobox-style; plain
+    // Tab-reachable links, no roving arrow-key focus): interacting outside
+    // the field+list closes it but the interaction is NOT swallowed —
     // unlike the modal header panels, which scrim-dismiss in Base.astro.
     if (opts.dismiss) {
       const box = input.closest('form') || input.parentElement;
-      const hide = () => { clearTimeout(timer); list.innerHTML = ''; status.textContent = ''; };
+      const hide = () => { clearTimeout(timer); list.replaceChildren(); status.textContent = ''; };
       document.addEventListener('pointerdown', (e) => { if (list.firstChild && !box.contains(e.target)) hide(); });
       // relatedTarget may be null mid-click on our own links — pointerdown covers that path
       box.addEventListener('focusout', (e) => { if (e.relatedTarget && !box.contains(e.relatedTarget)) hide(); });