@open-agent-toolkit/cli 0.3.34 → 0.3.35

package/README.md

@@ -49,7 +49,7 @@ For an approved fresh reader model, pass `--ia-preset <preset> --planned-pages <
 
 Fumadocs static exports include `llms.txt`, `llms-full.txt` and `llms/<page-slugs>/content.md` (root `llms/content.md`) for loaded `.md` readers. These retain authored Markdown and source-relative-link guidance; configured non-readers and MDX are excluded. Use authored Contents maps and `oat docs nav sync`, followed by `--check`, for navigation changes.
 
-`oat docs check [--target-dir <dir>] [--rule <id>...] [--json]` performs read-only reader, navigation, contributor-command and Mermaid/SVG checks without a site build. Errors exit 1; warnings exit 0. Configure validated severities, numeric thresholds and reason-bearing exceptions under `documentation.check`. Mermaid syntax parsing lazily uses a real DOM with strict sanitization and no script/resource execution; Node 22.17 remains the minimum. See [checker rules and configuration](../../apps/oat-docs/docs/docs-tooling/check.md).
+`oat docs check [--target-dir <dir>] [--rule <id>...] [--json]` performs read-only reader, navigation, contributor-command and Mermaid/SVG checks without a site build. Errors exit 1; warnings exit 0. Configure validated severities, numeric thresholds and reason-bearing exceptions under `documentation.check`. Mermaid syntax parsing lazily loads the pinned Pele parser, which needs no DOM and never renders; Node 22.17 remains the minimum. See [checker rules and configuration](../../apps/oat-docs/docs/docs-tooling/check.md).
 
 `oat docs literals [--target-dir <dir>] --page <content-relative-reader.md> --source-root <repo-relative-dir> [--source-exclude <pattern>] --json` supplies read-only inline-code occurrence candidates for a matching triad IA mirror. Repeat each single-value selection flag as needed. Sources stay within narrow explicit implementation roots; searched/skipped evidence and first source physical lines are reported. Once-only strict HTML entity decoding and case-sensitive line-local substring matching do not establish runtime validity; analyze judges canonical relevance and authored IA acceptance. Completed not-found/not-applicable exits 0, input/config errors 1, unexpected failures 2. See [literal helper scope and limits](../../apps/oat-docs/docs/docs-tooling/commands.md#oat-docs-literals).
 

package/assets/bundle-metadata.json

@@ -1,4 +1,4 @@
 {
   "schemaVersion": 1,
-  "oatVersion": "0.3.34"
+  "oatVersion": "0.3.35"
 }

package/assets/docs/docs-tooling/check.md

@@ -107,7 +107,7 @@ recursive tabs participate.
 | `contents-separator`    | Warn when Contents descriptions mix separators in a tree.                                                                                                                                                                                                                                                                           |
 | `navigation`            | Error for explicit navigation drift. Nav-sync freshness stays strict; hand-authored/undeclared compare membership and order only (separators, labels, links and borrows are not compared), and absent optional meta/pages/nav skips comparison. Markdown skips it.                                                                  |
 | `commands`              | Error for missing literal contributor scripts; framework app targets try the app package first, then the repository root. Implicit pnpm shorthand also accepts installed package/workspace `.bin` entries. Explicit pnpm run/npm run stays script-only; unresolved context errors; echo scripts warn.                               |
-| `mermaid`               | Parse every real Mermaid fence using the pinned Mermaid parser. Invalid syntax errors.                                                                                                                                                                                                                                              |
+| `mermaid`               | Parse every real Mermaid fence with the pinned Pele parser. Invalid syntax errors, with the diagram line and column.                                                                                                                                                                                                                |
 | `diagram-pairs`         | Diagram light/dark SVG siblings and both page references are required. Conventional diagram paths and explicit paired references participate; ordinary logos are not diagrams.                                                                                                                                                      |
 | `diagram-accessibility` | Mermaid missing `accTitle`/`accDescr` warns. SVGs require `role="img"`, nonempty title/desc. Rendered diagrams without page-visible explanatory text or an associated long description warn.                                                                                                                                        |
 | `diagram-freshness`     | Warn when changed Mermaid lacks both associated SVG changes; association follows the actual section/tab group. Missing usable Git comparison is explicitly unverified.                                                                                                                                                              |
@@ -140,9 +140,9 @@ binary shorthand may be reported missing. Use `pnpm exec` for explicit binary ex
 
 ## Diagram comparison and limits
 
-Syntax validation lazily loads the pinned Mermaid parser with a real Node DOM
-and strict sanitization; script execution and resource loading stay disabled.
-It does not render or prove semantic/visual correctness. Inspect both themes
+Syntax validation lazily loads the pinned Pele parser, which reads Mermaid
+syntax without a DOM and never renders, runs scripts or loads resources.
+It does not prove semantic/visual correctness. Inspect both themes
 for important diagrams. Put meaningful `accTitle` and `accDescr` in Mermaid,
 keep SVG title/desc and page explanations, and change both theme SVGs with source.
 

package/assets/public-package-versions.json

@@ -1,6 +1,6 @@
 {
-  "cli": "0.3.34",
-  "docs-config": "0.3.34",
-  "docs-theme": "0.3.34",
-  "docs-transforms": "0.3.34"
+  "cli": "0.3.35",
+  "docs-config": "0.3.35",
+  "docs-theme": "0.3.35",
+  "docs-transforms": "0.3.35"
 }

package/dist/commands/docs/check/mermaid-runtime.d.ts

@@ -1,3 +1,3 @@
-/** Lazy, real Node DOM for Mermaid syntax parsing only. Never renders SVG. */
+/** Mermaid syntax check with the pinned, DOM-free Pele parser. Never renders. */
 export declare function parseMermaid(source: string): Promise<void>;
 //# sourceMappingURL=mermaid-runtime.d.ts.map

package/dist/commands/docs/check/mermaid-runtime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mermaid-runtime.d.ts","sourceRoot":"","sources":["../../../../src/commands/docs/check/mermaid-runtime.ts"],"names":[],"mappings":"AA6CA,8EAA8E;AAC9E,wBAAsB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAehE"}
+{"version":3,"file":"mermaid-runtime.d.ts","sourceRoot":"","sources":["../../../../src/commands/docs/check/mermaid-runtime.ts"],"names":[],"mappings":"AAyBA,iFAAiF;AACjF,wBAAsB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAUhE"}

package/dist/commands/docs/check/mermaid-runtime.js

@@ -1,57 +1,32 @@
 let runtime;
-let queue = Promise.resolve();
-async function withDom(dom, action) {
-    const keys = ['window', 'document'];
-    const saved = keys.map((key) => Object.getOwnPropertyDescriptor(globalThis, key));
-    Object.defineProperty(globalThis, 'window', {
-        configurable: true,
-        value: dom.window,
-    });
-    Object.defineProperty(globalThis, 'document', {
-        configurable: true,
-        value: dom.window.document,
-    });
-    try {
-        return await action();
-    }
-    finally {
-        keys.forEach((key, index) => {
-            const descriptor = saved[index];
-            if (descriptor)
-                Object.defineProperty(globalThis, key, descriptor);
-            else
-                Reflect.deleteProperty(globalThis, key);
-        });
-    }
+/**
+ * Pele reports syntax errors in Mermaid's multi-line form: a "Parse error on
+ * line N:" header, the offending source line, a caret line and the expected
+ * tokens. Keep only the explanation and append the diagram-relative position.
+ */
+function conciseMessage(error) {
+    const message = error.snippet
+        ? error.message.replace(error.snippet, '')
+        : error.message;
+    const detail = message
+        .split('\n')
+        .map((line) => line.trim())
+        .filter((line) => line && !/^Parse error on line \d+:?$/.test(line))
+        .join(' ');
+    return error.line > 0
+        ? `${detail} (diagram line ${error.line}, column ${error.column})`
+        : detail;
 }
-async function loadRuntime() {
-    const { JSDOM } = await import('jsdom');
-    // Defaults intentionally disable script execution and external resources.
-    const dom = new JSDOM('');
+/** Mermaid syntax check with the pinned, DOM-free Pele parser. Never renders. */
+export async function parseMermaid(source) {
+    runtime ??= import('pele');
+    const pele = await runtime;
     try {
-        const mermaid = await withDom(dom, async () => (await import('mermaid')).default);
-        process.once('beforeExit', () => dom.window.close());
-        return { dom, mermaid };
+        pele.parse(source);
     }
     catch (error) {
-        dom.window.close();
+        if (error instanceof pele.PeleError)
+            throw new Error(conciseMessage(error), { cause: error });
         throw error;
     }
 }
-/** Lazy, real Node DOM for Mermaid syntax parsing only. Never renders SVG. */
-export async function parseMermaid(source) {
-    const result = queue.then(async () => {
-        runtime ??= loadRuntime();
-        const { dom, mermaid } = await runtime;
-        await withDom(dom, async () => {
-            mermaid.initialize({
-                startOnLoad: false,
-                securityLevel: 'strict',
-                logLevel: 'fatal',
-            });
-            await mermaid.parse(source);
-        });
-    });
-    queue = result.catch(() => undefined);
-    await result;
-}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@open-agent-toolkit/cli",
-  "version": "0.3.34",
+  "version": "0.3.35",
   "private": false,
   "description": "Open Agent Toolkit CLI",
   "homepage": "https://github.com/voxmedia/open-agent-toolkit/tree/main/packages/cli",
@@ -32,21 +32,19 @@
     "commander": "^12.1.0",
     "entities": "6.0.1",
     "github-slugger": "2.0.0",
-    "jsdom": "29.1.1",
     "jsonc-parser": "3.2.1",
-    "mermaid": "11.12.3",
     "ora": "^9.0.0",
     "parse5": "7.3.0",
+    "pele": "1.10.0",
     "remark-gfm": "4.0.1",
     "remark-parse": "11.0.0",
     "unified": "11.0.5",
     "yaml": "2.8.2",
     "zod": "^3.25.76",
-    "@open-agent-toolkit/control-plane": "0.3.34",
-    "@open-agent-toolkit/docs-transforms": "0.3.34"
+    "@open-agent-toolkit/control-plane": "0.3.35",
+    "@open-agent-toolkit/docs-transforms": "0.3.35"
   },
   "devDependencies": {
-    "@types/jsdom": "28.0.3",
     "@types/node": "^22.10.0",
     "tsc-alias": "^1.8.10",
     "tsx": "^4.21.0",