@mermanjs/node 0.8.0-alpha.6 → 0.8.0-alpha.7

package/CHANGELOG.md

@@ -2,9 +2,24 @@
 
 All notable changes to the `@mermanjs/node` package group will be documented in this file.
 
+## [0.8.0-alpha.7] - 2026-09-30
+
+### Added
+
+- Added Mermaid 12 Agentflow and Usecase parsing and SVG rendering. Agentflow follows upstream beta syntax; neither family supports ASCII output.
+
+### Changed
+
+- Updated the engine from Mermaid 11.17.2 to 12.0.0, including ELK layout defaults and the new theme/look defaults for supported families. Refresh SVG snapshots; use top-level `layout: dagre`, `theme: default`, and `look: classic` when the previous presentation is needed. The bundled artifact already included ELK and retains its EPL-2.0 notices.
+- Safe diagram-local theme variables and fonts are admitted from frontmatter and directives while host security policy remains authoritative.
+
+### Compatibility
+
+- Native and Node-targeted WASM packages remain an experimental Node.js 22+ group. The existing SVG/layout capability recipe does not add ASCII, analysis, math, or raster/PDF export. Update the loader and all selected transport packages together.
+
 ## [0.8.0-alpha.6] - 2026-09-02
 
-This section describes the prepared alpha.6 source candidate. The npm alpha channel remains independently published and may still resolve alpha.5 until the alpha.6 package group is authorized.
+This section describes the published alpha.6 package group. All seven packages, including `@mermanjs/node-wasm`, were manually bootstrapped from the verified package-group artifact. The immutable alpha.6 npm tarballs have no npm provenance; later releases use Trusted Publishing.
 
 ### Added
 

package/README.md

@@ -35,8 +35,7 @@ Create an engine once, reuse it for related work, and dispose it during teardown
 Mermaid-compatible SVG structure for trusted input and parity-sensitive consumers. `parity` is
 not a browser DOM-admission or sanitization check.
 
-For SVG that will be embedded directly into HTML, or when the Mermaid source is not fully trusted,
-select the sealed `resvg-safe` pipeline explicitly:
+For a resvg/usvg consumer that cannot display HTML labels, select `resvg-safe` explicitly:
 
 ```js
 const options = {
@@ -45,8 +44,14 @@ const options = {
 const svg = await engine.renderSvg(source, options);
 ```
 
-The supported pipeline values are `parity`, `readable`, and `resvg-safe`. The safe pipeline can
-remove browser-only SVG features such as active content and `foreignObject` labels. It does not
+The supported pipeline values are `parity`, `readable`, and `resvg-safe`. `readable` is an advanced
+text overlay for consumers that ignore HTML labels; browsers can display both copies and show
+overlapping text. Use `parity` for browser display. `resvg-safe` also removes unsupported styles,
+so it is not a lossless replacement for `readable`. HTML embedding still requires a host-owned
+admission policy; selecting a pipeline alone does not establish browser DOM safety.
+
+The `resvg-safe` pipeline removes browser-only content such as active elements and `foreignObject`
+labels. It does not
 provide browser `Document` or owner-document admission APIs; use `@mermanjs/web*` for browser DOM
 mounting.
 

package/THIRD_PARTY_LICENSES/rust-cargo-dependencies.json

@@ -5,7 +5,7 @@
     "version": "0.9.1",
     "command_profile": "workspace-all-features-runtime",
     "offline": true,
-    "cargo_lock_sha256": "ca5a176c6317dd18b1d36dd56f4e83956922c551d53348604484e5c81e28c320",
+    "cargo_lock_sha256": "d6f4a4d87ddb5edbf4599ba1ffe0ba3f1bade3edd5a32103bb4f93a1a7957198",
     "configuration_sha256": "50ee414d81334fe54e34465a8441d8ee5ec237518b06b3759c794056aa3e26a4"
   },
   "licenses": [
@@ -150,7 +150,7 @@
         },
         {
           "name": "aws-lc-sys",
-          "version": "0.43.0",
+          "version": "0.45.0",
           "source": "registry+https://github.com/rust-lang/crates.io-index",
           "license_expression": "ISC AND (Apache-2.0 OR ISC) AND Apache-2.0 AND MIT AND BSD-3-Clause AND (Apache-2.0 OR ISC OR MIT) AND (Apache-2.0 OR ISC OR MIT-0)",
           "authors": [
@@ -1346,6 +1346,16 @@
           "license_expression": "MIT OR Apache-2.0",
           "authors": [],
           "repository": "https://github.com/rust-lang/cargo"
+        },
+        {
+          "name": "proc-macro-crate",
+          "version": "3.5.0",
+          "source": "registry+https://github.com/rust-lang/crates.io-index",
+          "license_expression": "MIT OR Apache-2.0",
+          "authors": [
+            "Bastian K\u00f6cher <git@kchr.de>"
+          ],
+          "repository": "https://github.com/bkchr/proc-macro-crate"
         }
       ]
     },
@@ -2178,7 +2188,7 @@
         },
         {
           "name": "rustls",
-          "version": "0.23.43",
+          "version": "0.23.45",
           "source": "registry+https://github.com/rust-lang/crates.io-index",
           "license_expression": "Apache-2.0 OR ISC OR MIT",
           "authors": [],
@@ -3113,6 +3123,14 @@
           "authors": [],
           "repository": "https://github.com/toml-rs/toml"
         },
+        {
+          "name": "toml_edit",
+          "version": "0.25.13+spec-1.1.0",
+          "source": "registry+https://github.com/rust-lang/crates.io-index",
+          "license_expression": "MIT OR Apache-2.0",
+          "authors": [],
+          "repository": "https://github.com/toml-rs/toml"
+        },
         {
           "name": "toml_parser",
           "version": "1.1.3+spec-1.1.0",
@@ -3377,7 +3395,7 @@
         },
         {
           "name": "aws-lc-sys",
-          "version": "0.43.0",
+          "version": "0.45.0",
           "source": "registry+https://github.com/rust-lang/crates.io-index",
           "license_expression": "ISC AND (Apache-2.0 OR ISC) AND Apache-2.0 AND MIT AND BSD-3-Clause AND (Apache-2.0 OR ISC OR MIT) AND (Apache-2.0 OR ISC OR MIT-0)",
           "authors": [
@@ -3534,7 +3552,7 @@
       "packages": [
         {
           "name": "rustls-webpki",
-          "version": "0.103.13",
+          "version": "0.103.15",
           "source": "registry+https://github.com/rust-lang/crates.io-index",
           "license_expression": "ISC",
           "authors": [],
@@ -3568,7 +3586,7 @@
       "packages": [
         {
           "name": "aws-lc-rs",
-          "version": "1.17.3",
+          "version": "1.18.1",
           "source": "registry+https://github.com/rust-lang/crates.io-index",
           "license_expression": "ISC AND (Apache-2.0 OR ISC)",
           "authors": [
@@ -3578,7 +3596,7 @@
         },
         {
           "name": "aws-lc-sys",
-          "version": "0.43.0",
+          "version": "0.45.0",
           "source": "registry+https://github.com/rust-lang/crates.io-index",
           "license_expression": "ISC AND (Apache-2.0 OR ISC) AND Apache-2.0 AND MIT AND BSD-3-Clause AND (Apache-2.0 OR ISC OR MIT) AND (Apache-2.0 OR ISC OR MIT-0)",
           "authors": [
@@ -4188,7 +4206,7 @@
       "packages": [
         {
           "name": "aws-lc-sys",
-          "version": "0.43.0",
+          "version": "0.45.0",
           "source": "registry+https://github.com/rust-lang/crates.io-index",
           "license_expression": "ISC AND (Apache-2.0 OR ISC) AND Apache-2.0 AND MIT AND BSD-3-Clause AND (Apache-2.0 OR ISC OR MIT) AND (Apache-2.0 OR ISC OR MIT-0)",
           "authors": [

package/THIRD_PARTY_NOTICES.md

@@ -19,9 +19,9 @@ Components: `beautiful-mermaid`, `mermaid`, `mermaid-ascii`, `mermaid-rs-rendere
 
 ### `cli-default`
 
-The default CLI feature closure without ELK, retaining the explicit RaTeX math/font support.
+The default CLI feature closure including ELK and RaTeX math/font support.
 
-Components: `cose-base-v1`, `cose-base-v2`, `cytoscape`, `cytoscape-cose-bilkent`, `cytoscape-fcose`, `d3-shape`, `dagre`, `dompurify`, `fmin`, `graphlib`, `katex-fonts`, `layout-base-v1`, `layout-base-v2`, `mermaid`, `non-layered-tidy-tree-layout`, `ratex`, `rough-rs`, `roughjs`, `sanitize-url`, `venn-js`, `zenuml-core`.
+Components: `cose-base-v1`, `cose-base-v2`, `cytoscape`, `cytoscape-cose-bilkent`, `cytoscape-fcose`, `d3-shape`, `dagre`, `dompurify`, `eclipse-elk`, `elkjs`, `fmin`, `graphlib`, `katex-fonts`, `layout-base-v1`, `layout-base-v2`, `mermaid`, `non-layered-tidy-tree-layout`, `ratex`, `rough-rs`, `roughjs`, `sanitize-url`, `venn-js`, `zenuml-core`.
 
 ### `cli-release`
 
@@ -57,13 +57,13 @@ Components: `cose-base-v1`, `cose-base-v2`, `cytoscape`, `cytoscape-cose-bilkent
 
 Conservative repository source archive inventory covering every translated, copied, linked, embedded, fixture, and behavior-reference component recorded here.
 
-Components: `beautiful-mermaid`, `cose-base-v1`, `cose-base-v2`, `cytoscape`, `cytoscape-cose-bilkent`, `cytoscape-fcose`, `d3-shape`, `dagre`, `dompurify`, `eclipse-elk`, `elkjs`, `fmin`, `graphlib`, `katex-fonts`, `layout-base-v1`, `layout-base-v2`, `mermaid`, `mermaid-ascii`, `mermaid-rs-renderer`, `monaqa-tree-sitter-mermaid`, `non-layered-tidy-tree-layout`, `pappasam-tree-sitter-mermaid`, `ratex`, `rough-rs`, `roughjs`, `sanitize-url`, `singularity-tree-sitter-mermaid`, `tree-sitter-generator`, `tree-sitter-mermaid-mermaid-baseline`, `tree-sitter-mermaid-zenuml-baseline`, `venn-js`, `wasm-minimal-protocol`, `zenuml-core`.
+Components: `beautiful-mermaid`, `cose-base-v1`, `cose-base-v2`, `cytoscape`, `cytoscape-cose-bilkent`, `cytoscape-fcose`, `d3-shape`, `dagre`, `dompurify`, `eclipse-elk`, `elkjs`, `fmin`, `graphlib`, `katex-fonts`, `layout-base-v1`, `layout-base-v2`, `mermaid`, `mermaid-ascii`, `mermaid-rs-renderer`, `monaqa-tree-sitter-mermaid`, `non-layered-tidy-tree-layout`, `pappasam-tree-sitter-mermaid`, `ratex`, `rough-rs`, `roughjs`, `sanitize-url`, `singularity-tree-sitter-mermaid`, `tree-sitter-generator`, `tree-sitter-mermaid-mermaid-12-new-families`, `tree-sitter-mermaid-mermaid-baseline`, `tree-sitter-mermaid-zenuml-baseline`, `venn-js`, `wasm-minimal-protocol`, `zenuml-core`.
 
 ### `tree-sitter-mermaid-source`
 
 The independently versioned Tree-sitter Mermaid language source package and its pinned syntax and compatibility references.
 
-Components: `monaqa-tree-sitter-mermaid`, `pappasam-tree-sitter-mermaid`, `singularity-tree-sitter-mermaid`, `tree-sitter-generator`, `tree-sitter-mermaid-mermaid-baseline`, `tree-sitter-mermaid-zenuml-baseline`.
+Components: `monaqa-tree-sitter-mermaid`, `pappasam-tree-sitter-mermaid`, `singularity-tree-sitter-mermaid`, `tree-sitter-generator`, `tree-sitter-mermaid-mermaid-12-new-families`, `tree-sitter-mermaid-mermaid-baseline`, `tree-sitter-mermaid-zenuml-baseline`.
 
 ### `typst-publish`
 
@@ -235,10 +235,10 @@ Dugong is a modified Rust translation of Dagre's directed graph layout pipeline.
 
 Merman selects DOMPurify's Apache-2.0 option for generated sanitizer defaults; the exact upstream Apache-2.0 license file is preserved.
 
-- Version: `3.4.13`
+- Version: `3.4.15`
 - Source: <https://github.com/cure53/DOMPurify.git>
-- Source ref: `3.4.13`
-- Source commit: `3067f774676975de12306effd6db6ad7a9a8c17f`
+- Source ref: `3.4.15`
+- Source commit: `1d7460c4f8a27be825c11b1c9d346d79db32c1e5`
 - Source path: `.`
 - Relationship: `generated`, `translated`
 - License expression: `(Apache-2.0 OR MPL-2.0)`
@@ -250,16 +250,16 @@ Merman selects DOMPurify's Apache-2.0 option for generated sanitizer defaults; t
 
 ### Eclipse Layout Kernel (`eclipse-elk`)
 
-The merman-elk-layered crate contains a modified Rust source translation of Eclipse ELK layered algorithms under EPL-2.0.
+The merman-elk-layered crate contains modified Rust source translations of Eclipse ELK layered, Box, Force, Stress, Mr. Tree, Radial, Rectangle Packing, and SPOrE overlap-removal algorithms, including common and core layout utilities, under EPL-2.0.
 
 - Version: `0.9.1`
 - Source: <https://github.com/eclipse-elk/elk.git>
 - Source ref: `v0.9.1`
 - Source commit: `62d5909f96fad541bc101ad52dabaece6b7eab7e`
-- Source path: `plugins/org.eclipse.elk.alg.layered`
+- Source path: `plugins`
 - Relationship: `modified`, `translated`
 - License expression: `EPL-2.0`
-- Artifact scopes: `cli-release`, `elk-render`, `source-archive`, `typst-publish`, `web-full`, `web-render`
+- Artifact scopes: `cli-default`, `cli-release`, `elk-render`, `source-archive`, `typst-publish`, `web-full`, `web-render`
 - Local evidence: `crates/merman-elk-layered`, `crates/merman-layout-elk`
 - Legal files:
   - [`THIRD_PARTY_LICENSES/eclipse-elk/LICENSE.md`](THIRD_PARTY_LICENSES/eclipse-elk/LICENSE.md) (license, SHA-256 `89591d4578fb1ebd91501312a3d25f021bd865a2e436641c1cf7b1bc7e3c1617`)
@@ -275,7 +275,7 @@ Mermaid's ELK adapter behavior is compared against this JavaScript distribution,
 - Source path: `.`
 - Relationship: `behavior-reference`
 - License expression: `EPL-2.0`
-- Artifact scopes: `cli-release`, `elk-render`, `playground-reference`, `source-archive`, `typst-publish`, `web-full`, `web-render`
+- Artifact scopes: `cli-default`, `cli-release`, `elk-render`, `playground-reference`, `source-archive`, `typst-publish`, `web-full`, `web-render`
 - Local evidence: `crates/merman-layout-elk`, `playground`
 - Legal files:
   - [`THIRD_PARTY_LICENSES/elkjs/LICENSE.md`](THIRD_PARTY_LICENSES/elkjs/LICENSE.md) (license, SHA-256 `89591d4578fb1ebd91501312a3d25f021bd865a2e436641c1cf7b1bc7e3c1617`)
@@ -365,10 +365,10 @@ Manatee also follows the newer layout-base behavior selected by the FCoSE depend
 
 Merman independently implements Mermaid-compatible behavior while translating selected algorithms, generating defaults, copying architecture icon data, and retaining upstream fixtures and snapshots.
 
-- Version: `11.17.2`
+- Version: `12.0.0`
 - Source: <https://github.com/mermaid-js/mermaid.git>
-- Source ref: `mermaid@11.17.2`
-- Source commit: `dcb694ddb58dc5ad3502e7e903cac05fd812eac3`
+- Source ref: `mermaid@12.0.0`
+- Source commit: `98a0945418c76238f15df2afaddbba4272656c3b`
 - Source path: `packages/mermaid`
 - Relationship: `behavior-reference`, `copied`, `fixtures`, `generated`, `modified`, `translated`
 - License expression: `MIT`
@@ -554,9 +554,25 @@ The language package uses the pinned generator, copies its generated support hea
 - Legal files:
   - [`THIRD_PARTY_LICENSES/tree-sitter/LICENSE`](THIRD_PARTY_LICENSES/tree-sitter/LICENSE) (license, SHA-256 `c5cfb43042b6b72045f4ba997834d0a7786d2793d91680868b5815b39f14fc78`)
 
+### Mermaid (tree-sitter-mermaid Agentflow and Usecase additions) (`tree-sitter-mermaid-mermaid-12-new-families`)
+
+The language package translates Agentflow and Usecase syntax from the pinned Mermaid 12.0.0 source and carries source-backed editor corpus cases. Existing diagram-family derivations retain their separately recorded Mermaid 11.16.1 source identity.
+
+- Version: `12.0.0`
+- Source: <https://github.com/mermaid-js/mermaid.git>
+- Source ref: `mermaid@12.0.0`
+- Source commit: `98a0945418c76238f15df2afaddbba4272656c3b`
+- Source path: `packages/mermaid`
+- Relationship: `behavior-reference`, `fixtures`, `translated`
+- License expression: `MIT`
+- Artifact scopes: `source-archive`, `tree-sitter-mermaid-source`
+- Local evidence: `distribution/tree-sitter-mermaid/grammar/families/agentflow.js`, `distribution/tree-sitter-mermaid/grammar/families/usecase.js`, `distribution/tree-sitter-mermaid/test/corpus/families/agentflow.txt`, `distribution/tree-sitter-mermaid/test/corpus/families/usecase.txt`, `distribution/tree-sitter-mermaid/test/fixtures/family-roots.json`
+- Legal files:
+  - [`THIRD_PARTY_LICENSES/mermaid/LICENSE`](THIRD_PARTY_LICENSES/mermaid/LICENSE) (license, SHA-256 `ec9fb67dcb25eccc416ed56e1aab819222c805a2a4bfe4cb19e7556bf2ffde80`)
+
 ### Mermaid (tree-sitter-mermaid baseline) (`tree-sitter-mermaid-mermaid-baseline`)
 
-The language package translates the exact Mermaid 11.16.1 syntax baseline and carries Merman-selected representative fixtures recorded against that baseline; this component intentionally does not move with the repository baseline.
+The language package retains the exact Mermaid 11.16.1 syntax baseline for its original 35 diagram families and their representative fixtures. Agentflow and Usecase additions are attributed separately to Mermaid 12.0.0; this component intentionally does not move with the repository baseline.
 
 - Version: `11.16.1`
 - Source: <https://github.com/mermaid-js/mermaid.git>

package/dist/engine.mjs

@@ -999,7 +999,12 @@ function validateTextMeasurement(value, { requiresSvgPipeline }) {
 function validateRegistry(value) {
   if (
     !safeInteger(value.diagram_family_count) ||
-    value.diagram_family_count < 0
+    value.diagram_family_count < 0 ||
+    !Array.isArray(value.diagram_families) ||
+    value.diagram_families.some((family, index) =>
+      typeof family !== "string" || !/^[a-z][A-Za-z0-9]*$/.test(family) ||
+      family === "error" || (index > 0 && value.diagram_families[index - 1] >= family)
+    )
   ) {
     throw new MermanInvalidTransportError(
       "Merman runtime catalog has invalid registry metadata.",

package/dist/generated/binding-contract.mjs

@@ -230,6 +230,20 @@ export const BINDING_OPERATION_METADATA_CONTRACT = {
           "integer_width_bits": null,
           "open_value": false
         },
+        {
+          "name": "requested_layout_profile",
+          "json_type": "string",
+          "required": true,
+          "integer_width_bits": null,
+          "open_value": false
+        },
+        {
+          "name": "compact_attempted",
+          "json_type": "boolean",
+          "required": true,
+          "integer_width_bits": null,
+          "open_value": false
+        },
         {
           "name": "requested_max_width",
           "json_type": "unsigned-integer",

package/dist/generated/capability-surface.mjs

@@ -2,7 +2,7 @@
 // Source: capabilities/feature-surface-v1.json. Do not edit directly.
 
 export const CAPABILITY_DESCRIPTOR_SCHEMA_VERSION = 1;
-export const CAPABILITY_DESCRIPTOR_DIGEST = "sha256:e3dfc678c1ccd830bb4e2a10b24b0e5957c6cb6112c9e1c9f75d847317ba31d7";
+export const CAPABILITY_DESCRIPTOR_DIGEST = "sha256:f36a4518be6e5ad041629d3e5b117f2931703ac29b50c5de1e12c066620586ed";
 
 export const NODE_BINDING_OPERATIONS = [
   {

package/dist/index.d.ts

@@ -160,6 +160,7 @@ export interface MermanRuntimeCatalog {
   output_contracts: MermanRuntimeOutputContract[];
   registry: {
     diagram_family_count: number;
+    diagram_families: string[];
     [key: string]: unknown;
   };
   resources: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mermanjs/node",
-  "version": "0.8.0-alpha.6",
+  "version": "0.8.0-alpha.7",
   "description": "Experimental native Node.js and static-site rendering bindings for Merman.",
   "type": "module",
   "engines": {
@@ -41,10 +41,10 @@
   ],
   "license": "MIT OR Apache-2.0",
   "optionalDependencies": {
-    "@mermanjs/node-darwin-arm64": "0.8.0-alpha.6",
-    "@mermanjs/node-darwin-x64": "0.8.0-alpha.6",
-    "@mermanjs/node-linux-x64-gnu": "0.8.0-alpha.6",
-    "@mermanjs/node-linux-x64-musl": "0.8.0-alpha.6",
-    "@mermanjs/node-win32-x64-msvc": "0.8.0-alpha.6"
+    "@mermanjs/node-darwin-arm64": "0.8.0-alpha.7",
+    "@mermanjs/node-darwin-x64": "0.8.0-alpha.7",
+    "@mermanjs/node-linux-x64-gnu": "0.8.0-alpha.7",
+    "@mermanjs/node-linux-x64-musl": "0.8.0-alpha.7",
+    "@mermanjs/node-win32-x64-msvc": "0.8.0-alpha.7"
   }
 }