sfn-diagram 1.9.0 → 1.9.1

package/dist/bin.js

@@ -6,7 +6,7 @@ import { parse } from "yaml";
 import dagre from "@dagrejs/dagre";
 import { curveBasis, line } from "d3-shape";
 import { minimatch } from "minimatch";
-import { homedir } from "node:os";
+import { homedir, totalmem } from "node:os";
 import { execFileSync } from "node:child_process";
 // src/config/withoutUndefined.ts
 /**
@@ -2837,7 +2837,8 @@ function parseAsl(params) {
 	});
 	return {
 		edges: assignEdgeIds({ edges }),
-		nodes
+		nodes,
+		startId: resolver.resolve("", definition.StartAt)
 	};
 }
 /**
@@ -9081,11 +9082,15 @@ ${playbackRules(palette)}
 * Mermaid numeric-entity escapes for characters that are significant to
 * `stateDiagram-v2` syntax: `#` introduces an entity itself, `"` and `;` end a
 * label or statement early, `<`/`>` and `{`/`}` are HTML/composite-state
-* syntax, and a backtick can break Markdown-flavoured label rendering.
+* syntax, and a backtick can break Markdown-flavoured label rendering. Mermaid
+* up to at least 11.4.1 also rejects a `:` inside a state description or an
+* edge label (`A: Rejected (error: X)`), and renderers that bundle an older
+* Mermaid (a self-managed GitLab, an editor preview) are still in use.
 */
 const MERMAID_LABEL_ENTITIES = {
 	"#": "#35;",
 	"\"": "#quot;",
+	":": "#58;",
 	";": "#59;",
 	"<": "#60;",
 	">": "#62;",
@@ -9280,7 +9285,7 @@ var MermaidRenderer = class {
 	* a literal `-->` inside a label, so no separate arrow rule is needed.
 	*/
 	escapeLabel(label) {
-		return label.replace(/[#";<>{}`]/g, (character) => MERMAID_LABEL_ENTITIES[character]).replace(/\n/g, " ");
+		return label.replace(/[#":;<>{}`]/g, (character) => MERMAID_LABEL_ENTITIES[character]).replace(/\n/g, " ");
 	}
 	/**
 	* Build the lines of one scope: its `[*]` entry, state label lines, nested
@@ -9356,10 +9361,13 @@ var MermaidRenderer = class {
 	/**
 	* Find the start state from the ASL definition's StartAt or, without one, the
 	* first top-level state nothing else transitions to.
+	*
+	* StartAt is resolved to a node id the way the parser resolved it, because the id
+	* can differ from the name (a sanitized character, or a discriminator).
 	*/
 	findStartState(params) {
 		const { asl, root } = params;
-		if (asl?.StartAt) return asl.StartAt;
+		if (asl?.StartAt) return buildIdResolver({ definition: asl }).resolve("", asl.StartAt);
 		const targetIds = new Set(root.transitions.filter((edge) => edge.from !== edge.to).map((edge) => edge.to));
 		return root.memberIds.find((id) => !targetIds.has(id)) ?? root.memberIds[0];
 	}
@@ -9880,7 +9888,7 @@ function buildDiagramGraph(params) {
 		edges: parsed.edges,
 		mode: options.catchHandling,
 		nodes: parsed.nodes,
-		startStateId: definition.StartAt
+		startStateId: parsed.startId
 	});
 	return {
 		edges,
@@ -15086,6 +15094,33 @@ function resolvePngFontOptions(params) {
 	};
 }
 // src/exporters/resvgEngine.ts
+/** Bytes per pixel in resvg's RGBA output pixmap. */
+const PIXMAP_BYTES_PER_PIXEL = 4;
+/** Bytes in a GiB, for error messages. */
+const GIB = 2 ** 30;
+/**
+* Rounded intrinsic width below which {@link maxIntrinsicAspect} reads the exact size,
+* keeping the rounding bound within about 1% where it is used.
+*/
+const EXACT_SIZE_BELOW_WIDTH = 100;
+/**
+* The largest height-to-width ratio the SVG's intrinsic size can have, or 0 when it has
+* no width.
+*
+* resvg's `width` and `height` getters round to whole pixels, so each true side lies
+* within 0.5 of its getter and `(height + 0.5) / (width - 0.5)` bounds the true ratio
+* from above. That bound is loose for a narrow SVG (3x at 1 x 1) and missing when the
+* width rounds to 0, so below {@link EXACT_SIZE_BELOW_WIDTH} the exact size is read
+* from the serialized root element instead. Every SVG this package generates is wider.
+*/
+function maxIntrinsicAspect(params) {
+	const { intrinsic } = params;
+	if (intrinsic.width >= EXACT_SIZE_BELOW_WIDTH) return (intrinsic.height + .5) / (intrinsic.width - .5);
+	const root = /<svg\b[^>]*>/.exec(intrinsic.toString())?.[0] ?? "";
+	const exactWidth = Number(/\swidth="([^"]*)"/.exec(root)?.[1]);
+	const exactHeight = Number(/\sheight="([^"]*)"/.exec(root)?.[1]);
+	return exactWidth > 0 && exactHeight > 0 ? exactHeight / exactWidth : 0;
+}
 /**
 * Lazily load `@resvg/resvg-js`, which is an optional peer dependency. Keeping
 * it out of the static import graph means SVG/Mermaid-only consumers never
@@ -15113,7 +15148,14 @@ async function loadResvg() {
 async function renderResvgPng(params) {
 	const { backgroundColor, fontDirs, fontFamily, fontFiles, loadSystemFonts, preferredFamily, scale = 1, svg, width } = params;
 	if (!Number.isFinite(scale) || scale <= 0) throw new Error(`PNG export 'scale' must be a positive finite number, got ${scale}.`);
-	const { renderAsync } = await loadResvg();
+	const { Resvg, renderAsync } = await loadResvg();
+	const aspect = maxIntrinsicAspect({ intrinsic: new Resvg(svg, { font: { loadSystemFonts: false } }) });
+	const targetWidth = Math.round(width * scale);
+	const targetHeight = Math.ceil(targetWidth * aspect);
+	const pixmapBytes = targetWidth * targetHeight * PIXMAP_BYTES_PER_PIXEL;
+	const constrained = process.constrainedMemory?.() ?? 0;
+	const memoryBytes = constrained > 0 ? Math.min(constrained, totalmem()) : totalmem();
+	if (pixmapBytes > memoryBytes) throw new Error(`PNG export is too large: at scale ${scale} the image would be ${targetWidth} x ${targetHeight} pixels, which needs ${(pixmapBytes / GIB).toFixed(1)} GiB of memory, more than the ${(memoryBytes / GIB).toFixed(1)} GiB available.${scale > 1 ? " Use a smaller scale." : ""}`);
 	const font = resolvePngFontOptions({
 		fontDirs,
 		fontFamily,
@@ -16214,7 +16256,7 @@ function isTerraformInput(params) {
 * as Terraform. Extraction warnings go to stderr.
 */
 function resolveDefinitionSource(params) {
-	const { path, resolveCfn, resource, source } = params;
+	const { path, reportWarnings, resolveCfn, resource, source } = params;
 	if (isTerraformInput({
 		path,
 		source
@@ -16223,7 +16265,7 @@ function resolveDefinitionSource(params) {
 			config: source,
 			resourceId: resource ?? void 0
 		});
-		writeExtractionWarnings({ warnings });
+		if (reportWarnings) writeExtractionWarnings({ warnings });
 		return aslDefinition;
 	}
 	if (!resolveCfn && !isCfnTemplate(source)) return source;
@@ -16231,7 +16273,7 @@ function resolveDefinitionSource(params) {
 		resourceId: resource ?? void 0,
 		template: source
 	});
-	writeExtractionWarnings({ warnings });
+	if (reportWarnings) writeExtractionWarnings({ warnings });
 	return aslDefinition;
 }
 /**
@@ -16502,7 +16544,7 @@ async function runCommentGitlab(argv) {
 *   not be read, parsed, rendered or written, or if `--check` found an error.
 */
 async function renderOneInput(params) {
-	const { args, baselineIsLive, baselineSource, cache, definitionText, historySource, labelInput, options, outputPath, source, theme, writeAtomically } = params;
+	const { args, baselineIsLive, baselineSource, cache, definitionText, historySource, labelInput, options, outputPath, reportStatic, source, theme, writeAtomically } = params;
 	/** Write this render's output, honouring the atomic-write choice once. */
 	const emit = (content) => writeOutput({
 		atomic: writeAtomically,
@@ -16525,12 +16567,14 @@ async function renderOneInput(params) {
 	try {
 		definitionSource = resolveDefinitionSource({
 			path: source.kind === "file" ? source.path : null,
+			reportWarnings: reportStatic,
 			resolveCfn: args.resolveCfn,
 			resource: args.resource,
 			source: aslSource
 		});
 		if (baselineSource !== null) baselineDefinition = resolveDefinitionSource({
 			path: baselineIsLive ? null : args.diff,
+			reportWarnings: reportStatic,
 			resolveCfn: args.resolveCfn && !baselineIsLive,
 			resource: baselineIsLive ? null : args.resource,
 			source: baselineSource
@@ -16590,7 +16634,7 @@ async function renderOneInput(params) {
 				...redact ? { redact } : {},
 				...svgOptions
 			});
-			if (result.metadata.diff) writeDiffSummary(result.metadata.diff);
+			if (result.metadata.diff && reportStatic) writeDiffSummary(result.metadata.diff);
 			if (result.metadata.execution) writeExecutionSummary(result.metadata.execution);
 			emit(result.html);
 			return 0;
@@ -16603,7 +16647,7 @@ async function renderOneInput(params) {
 					layout: options.layout,
 					theme
 				});
-				writeDiffSummary(result.metadata);
+				if (reportStatic) writeDiffSummary(result.metadata);
 				emit(result.code);
 				return 0;
 			}
@@ -16612,7 +16656,7 @@ async function renderOneInput(params) {
 				before: baselineDefinition,
 				...svgOptions
 			});
-			writeDiffSummary(result.metadata);
+			if (reportStatic) writeDiffSummary(result.metadata);
 			emit(result.svg);
 			return 0;
 		}
@@ -17335,6 +17379,7 @@ async function renderResolvedBatch(params) {
 			labelInput,
 			options,
 			outputPath: item.outputPath,
+			reportStatic: true,
 			source: item.source,
 			theme,
 			writeAtomically: false
@@ -17404,6 +17449,7 @@ async function runFollow(params) {
 					labelInput: false,
 					options,
 					outputPath,
+					reportStatic: ticks === 1,
 					source,
 					theme,
 					writeAtomically: true

package/dist/ci.cjs

@@ -2690,7 +2690,8 @@ function parseAsl(params) {
 	});
 	return {
 		edges: assignEdgeIds({ edges }),
-		nodes
+		nodes,
+		startId: resolver.resolve("", definition.StartAt)
 	};
 }
 /**
@@ -6043,11 +6044,15 @@ function resolveViewerTheme(params) {
 * Mermaid numeric-entity escapes for characters that are significant to
 * `stateDiagram-v2` syntax: `#` introduces an entity itself, `"` and `;` end a
 * label or statement early, `<`/`>` and `{`/`}` are HTML/composite-state
-* syntax, and a backtick can break Markdown-flavoured label rendering.
+* syntax, and a backtick can break Markdown-flavoured label rendering. Mermaid
+* up to at least 11.4.1 also rejects a `:` inside a state description or an
+* edge label (`A: Rejected (error: X)`), and renderers that bundle an older
+* Mermaid (a self-managed GitLab, an editor preview) are still in use.
 */
 const MERMAID_LABEL_ENTITIES = {
 	"#": "#35;",
 	"\"": "#quot;",
+	":": "#58;",
 	";": "#59;",
 	"<": "#60;",
 	">": "#62;",
@@ -6242,7 +6247,7 @@ var MermaidRenderer = class {
 	* a literal `-->` inside a label, so no separate arrow rule is needed.
 	*/
 	escapeLabel(label) {
-		return label.replace(/[#";<>{}`]/g, (character) => MERMAID_LABEL_ENTITIES[character]).replace(/\n/g, " ");
+		return label.replace(/[#":;<>{}`]/g, (character) => MERMAID_LABEL_ENTITIES[character]).replace(/\n/g, " ");
 	}
 	/**
 	* Build the lines of one scope: its `[*]` entry, state label lines, nested
@@ -6318,10 +6323,13 @@ var MermaidRenderer = class {
 	/**
 	* Find the start state from the ASL definition's StartAt or, without one, the
 	* first top-level state nothing else transitions to.
+	*
+	* StartAt is resolved to a node id the way the parser resolved it, because the id
+	* can differ from the name (a sanitized character, or a discriminator).
 	*/
 	findStartState(params) {
 		const { asl, root } = params;
-		if (asl?.StartAt) return asl.StartAt;
+		if (asl?.StartAt) return buildIdResolver({ definition: asl }).resolve("", asl.StartAt);
 		const targetIds = new Set(root.transitions.filter((edge) => edge.from !== edge.to).map((edge) => edge.to));
 		return root.memberIds.find((id) => !targetIds.has(id)) ?? root.memberIds[0];
 	}
@@ -6991,7 +6999,7 @@ function buildDiagramGraph(params) {
 		edges: parsed.edges,
 		mode: options.catchHandling,
 		nodes: parsed.nodes,
-		startStateId: definition.StartAt
+		startStateId: parsed.startId
 	});
 	return {
 		edges,

package/dist/ci.js

@@ -2667,7 +2667,8 @@ function parseAsl(params) {
 	});
 	return {
 		edges: assignEdgeIds({ edges }),
-		nodes
+		nodes,
+		startId: resolver.resolve("", definition.StartAt)
 	};
 }
 /**
@@ -6020,11 +6021,15 @@ function resolveViewerTheme(params) {
 * Mermaid numeric-entity escapes for characters that are significant to
 * `stateDiagram-v2` syntax: `#` introduces an entity itself, `"` and `;` end a
 * label or statement early, `<`/`>` and `{`/`}` are HTML/composite-state
-* syntax, and a backtick can break Markdown-flavoured label rendering.
+* syntax, and a backtick can break Markdown-flavoured label rendering. Mermaid
+* up to at least 11.4.1 also rejects a `:` inside a state description or an
+* edge label (`A: Rejected (error: X)`), and renderers that bundle an older
+* Mermaid (a self-managed GitLab, an editor preview) are still in use.
 */
 const MERMAID_LABEL_ENTITIES = {
 	"#": "#35;",
 	"\"": "#quot;",
+	":": "#58;",
 	";": "#59;",
 	"<": "#60;",
 	">": "#62;",
@@ -6219,7 +6224,7 @@ var MermaidRenderer = class {
 	* a literal `-->` inside a label, so no separate arrow rule is needed.
 	*/
 	escapeLabel(label) {
-		return label.replace(/[#";<>{}`]/g, (character) => MERMAID_LABEL_ENTITIES[character]).replace(/\n/g, " ");
+		return label.replace(/[#":;<>{}`]/g, (character) => MERMAID_LABEL_ENTITIES[character]).replace(/\n/g, " ");
 	}
 	/**
 	* Build the lines of one scope: its `[*]` entry, state label lines, nested
@@ -6295,10 +6300,13 @@ var MermaidRenderer = class {
 	/**
 	* Find the start state from the ASL definition's StartAt or, without one, the
 	* first top-level state nothing else transitions to.
+	*
+	* StartAt is resolved to a node id the way the parser resolved it, because the id
+	* can differ from the name (a sanitized character, or a discriminator).
 	*/
 	findStartState(params) {
 		const { asl, root } = params;
-		if (asl?.StartAt) return asl.StartAt;
+		if (asl?.StartAt) return buildIdResolver({ definition: asl }).resolve("", asl.StartAt);
 		const targetIds = new Set(root.transitions.filter((edge) => edge.from !== edge.to).map((edge) => edge.to));
 		return root.memberIds.find((id) => !targetIds.has(id)) ?? root.memberIds[0];
 	}
@@ -6968,7 +6976,7 @@ function buildDiagramGraph(params) {
 		edges: parsed.edges,
 		mode: options.catchHandling,
 		nodes: parsed.nodes,
-		startStateId: definition.StartAt
+		startStateId: parsed.startId
 	});
 	return {
 		edges,

package/dist/element-auto.cjs

@@ -2851,7 +2851,8 @@ function parseAsl(params) {
 	});
 	return {
 		edges: assignEdgeIds({ edges }),
-		nodes
+		nodes,
+		startId: resolver.resolve("", definition.StartAt)
 	};
 }
 /**
@@ -9214,11 +9215,15 @@ function buildMermaidScopes(params) {
 * Mermaid numeric-entity escapes for characters that are significant to
 * `stateDiagram-v2` syntax: `#` introduces an entity itself, `"` and `;` end a
 * label or statement early, `<`/`>` and `{`/`}` are HTML/composite-state
-* syntax, and a backtick can break Markdown-flavoured label rendering.
+* syntax, and a backtick can break Markdown-flavoured label rendering. Mermaid
+* up to at least 11.4.1 also rejects a `:` inside a state description or an
+* edge label (`A: Rejected (error: X)`), and renderers that bundle an older
+* Mermaid (a self-managed GitLab, an editor preview) are still in use.
 */
 const MERMAID_LABEL_ENTITIES = {
 	"#": "#35;",
 	"\"": "#quot;",
+	":": "#58;",
 	";": "#59;",
 	"<": "#60;",
 	">": "#62;",
@@ -9413,7 +9418,7 @@ var MermaidRenderer = class {
 	* a literal `-->` inside a label, so no separate arrow rule is needed.
 	*/
 	escapeLabel(label) {
-		return label.replace(/[#";<>{}`]/g, (character) => MERMAID_LABEL_ENTITIES[character]).replace(/\n/g, " ");
+		return label.replace(/[#":;<>{}`]/g, (character) => MERMAID_LABEL_ENTITIES[character]).replace(/\n/g, " ");
 	}
 	/**
 	* Build the lines of one scope: its `[*]` entry, state label lines, nested
@@ -9489,10 +9494,13 @@ var MermaidRenderer = class {
 	/**
 	* Find the start state from the ASL definition's StartAt or, without one, the
 	* first top-level state nothing else transitions to.
+	*
+	* StartAt is resolved to a node id the way the parser resolved it, because the id
+	* can differ from the name (a sanitized character, or a discriminator).
 	*/
 	findStartState(params) {
 		const { asl, root } = params;
-		if (asl?.StartAt) return asl.StartAt;
+		if (asl?.StartAt) return buildIdResolver({ definition: asl }).resolve("", asl.StartAt);
 		const targetIds = new Set(root.transitions.filter((edge) => edge.from !== edge.to).map((edge) => edge.to));
 		return root.memberIds.find((id) => !targetIds.has(id)) ?? root.memberIds[0];
 	}
@@ -10162,7 +10170,7 @@ function buildDiagramGraph(params) {
 		edges: parsed.edges,
 		mode: options.catchHandling,
 		nodes: parsed.nodes,
-		startStateId: definition.StartAt
+		startStateId: parsed.startId
 	});
 	return {
 		edges,

package/dist/element-auto.js

@@ -2829,7 +2829,8 @@ function parseAsl(params) {
 	});
 	return {
 		edges: assignEdgeIds({ edges }),
-		nodes
+		nodes,
+		startId: resolver.resolve("", definition.StartAt)
 	};
 }
 /**
@@ -9192,11 +9193,15 @@ function buildMermaidScopes(params) {
 * Mermaid numeric-entity escapes for characters that are significant to
 * `stateDiagram-v2` syntax: `#` introduces an entity itself, `"` and `;` end a
 * label or statement early, `<`/`>` and `{`/`}` are HTML/composite-state
-* syntax, and a backtick can break Markdown-flavoured label rendering.
+* syntax, and a backtick can break Markdown-flavoured label rendering. Mermaid
+* up to at least 11.4.1 also rejects a `:` inside a state description or an
+* edge label (`A: Rejected (error: X)`), and renderers that bundle an older
+* Mermaid (a self-managed GitLab, an editor preview) are still in use.
 */
 const MERMAID_LABEL_ENTITIES = {
 	"#": "#35;",
 	"\"": "#quot;",
+	":": "#58;",
 	";": "#59;",
 	"<": "#60;",
 	">": "#62;",
@@ -9391,7 +9396,7 @@ var MermaidRenderer = class {
 	* a literal `-->` inside a label, so no separate arrow rule is needed.
 	*/
 	escapeLabel(label) {
-		return label.replace(/[#";<>{}`]/g, (character) => MERMAID_LABEL_ENTITIES[character]).replace(/\n/g, " ");
+		return label.replace(/[#":;<>{}`]/g, (character) => MERMAID_LABEL_ENTITIES[character]).replace(/\n/g, " ");
 	}
 	/**
 	* Build the lines of one scope: its `[*]` entry, state label lines, nested
@@ -9467,10 +9472,13 @@ var MermaidRenderer = class {
 	/**
 	* Find the start state from the ASL definition's StartAt or, without one, the
 	* first top-level state nothing else transitions to.
+	*
+	* StartAt is resolved to a node id the way the parser resolved it, because the id
+	* can differ from the name (a sanitized character, or a discriminator).
 	*/
 	findStartState(params) {
 		const { asl, root } = params;
-		if (asl?.StartAt) return asl.StartAt;
+		if (asl?.StartAt) return buildIdResolver({ definition: asl }).resolve("", asl.StartAt);
 		const targetIds = new Set(root.transitions.filter((edge) => edge.from !== edge.to).map((edge) => edge.to));
 		return root.memberIds.find((id) => !targetIds.has(id)) ?? root.memberIds[0];
 	}
@@ -10140,7 +10148,7 @@ function buildDiagramGraph(params) {
 		edges: parsed.edges,
 		mode: options.catchHandling,
 		nodes: parsed.nodes,
-		startStateId: definition.StartAt
+		startStateId: parsed.startId
 	});
 	return {
 		edges,

package/dist/element.cjs

@@ -2852,7 +2852,8 @@ function parseAsl(params) {
 	});
 	return {
 		edges: assignEdgeIds({ edges }),
-		nodes
+		nodes,
+		startId: resolver.resolve("", definition.StartAt)
 	};
 }
 /**
@@ -9215,11 +9216,15 @@ function buildMermaidScopes(params) {
 * Mermaid numeric-entity escapes for characters that are significant to
 * `stateDiagram-v2` syntax: `#` introduces an entity itself, `"` and `;` end a
 * label or statement early, `<`/`>` and `{`/`}` are HTML/composite-state
-* syntax, and a backtick can break Markdown-flavoured label rendering.
+* syntax, and a backtick can break Markdown-flavoured label rendering. Mermaid
+* up to at least 11.4.1 also rejects a `:` inside a state description or an
+* edge label (`A: Rejected (error: X)`), and renderers that bundle an older
+* Mermaid (a self-managed GitLab, an editor preview) are still in use.
 */
 const MERMAID_LABEL_ENTITIES = {
 	"#": "#35;",
 	"\"": "#quot;",
+	":": "#58;",
 	";": "#59;",
 	"<": "#60;",
 	">": "#62;",
@@ -9414,7 +9419,7 @@ var MermaidRenderer = class {
 	* a literal `-->` inside a label, so no separate arrow rule is needed.
 	*/
 	escapeLabel(label) {
-		return label.replace(/[#";<>{}`]/g, (character) => MERMAID_LABEL_ENTITIES[character]).replace(/\n/g, " ");
+		return label.replace(/[#":;<>{}`]/g, (character) => MERMAID_LABEL_ENTITIES[character]).replace(/\n/g, " ");
 	}
 	/**
 	* Build the lines of one scope: its `[*]` entry, state label lines, nested
@@ -9490,10 +9495,13 @@ var MermaidRenderer = class {
 	/**
 	* Find the start state from the ASL definition's StartAt or, without one, the
 	* first top-level state nothing else transitions to.
+	*
+	* StartAt is resolved to a node id the way the parser resolved it, because the id
+	* can differ from the name (a sanitized character, or a discriminator).
 	*/
 	findStartState(params) {
 		const { asl, root } = params;
-		if (asl?.StartAt) return asl.StartAt;
+		if (asl?.StartAt) return buildIdResolver({ definition: asl }).resolve("", asl.StartAt);
 		const targetIds = new Set(root.transitions.filter((edge) => edge.from !== edge.to).map((edge) => edge.to));
 		return root.memberIds.find((id) => !targetIds.has(id)) ?? root.memberIds[0];
 	}
@@ -10163,7 +10171,7 @@ function buildDiagramGraph(params) {
 		edges: parsed.edges,
 		mode: options.catchHandling,
 		nodes: parsed.nodes,
-		startStateId: definition.StartAt
+		startStateId: parsed.startId
 	});
 	return {
 		edges,

package/dist/element.js

@@ -2829,7 +2829,8 @@ function parseAsl(params) {
 	});
 	return {
 		edges: assignEdgeIds({ edges }),
-		nodes
+		nodes,
+		startId: resolver.resolve("", definition.StartAt)
 	};
 }
 /**
@@ -9192,11 +9193,15 @@ function buildMermaidScopes(params) {
 * Mermaid numeric-entity escapes for characters that are significant to
 * `stateDiagram-v2` syntax: `#` introduces an entity itself, `"` and `;` end a
 * label or statement early, `<`/`>` and `{`/`}` are HTML/composite-state
-* syntax, and a backtick can break Markdown-flavoured label rendering.
+* syntax, and a backtick can break Markdown-flavoured label rendering. Mermaid
+* up to at least 11.4.1 also rejects a `:` inside a state description or an
+* edge label (`A: Rejected (error: X)`), and renderers that bundle an older
+* Mermaid (a self-managed GitLab, an editor preview) are still in use.
 */
 const MERMAID_LABEL_ENTITIES = {
 	"#": "#35;",
 	"\"": "#quot;",
+	":": "#58;",
 	";": "#59;",
 	"<": "#60;",
 	">": "#62;",
@@ -9391,7 +9396,7 @@ var MermaidRenderer = class {
 	* a literal `-->` inside a label, so no separate arrow rule is needed.
 	*/
 	escapeLabel(label) {
-		return label.replace(/[#";<>{}`]/g, (character) => MERMAID_LABEL_ENTITIES[character]).replace(/\n/g, " ");
+		return label.replace(/[#":;<>{}`]/g, (character) => MERMAID_LABEL_ENTITIES[character]).replace(/\n/g, " ");
 	}
 	/**
 	* Build the lines of one scope: its `[*]` entry, state label lines, nested
@@ -9467,10 +9472,13 @@ var MermaidRenderer = class {
 	/**
 	* Find the start state from the ASL definition's StartAt or, without one, the
 	* first top-level state nothing else transitions to.
+	*
+	* StartAt is resolved to a node id the way the parser resolved it, because the id
+	* can differ from the name (a sanitized character, or a discriminator).
 	*/
 	findStartState(params) {
 		const { asl, root } = params;
-		if (asl?.StartAt) return asl.StartAt;
+		if (asl?.StartAt) return buildIdResolver({ definition: asl }).resolve("", asl.StartAt);
 		const targetIds = new Set(root.transitions.filter((edge) => edge.from !== edge.to).map((edge) => edge.to));
 		return root.memberIds.find((id) => !targetIds.has(id)) ?? root.memberIds[0];
 	}
@@ -10140,7 +10148,7 @@ function buildDiagramGraph(params) {
 		edges: parsed.edges,
 		mode: options.catchHandling,
 		nodes: parsed.nodes,
-		startStateId: definition.StartAt
+		startStateId: parsed.startId
 	});
 	return {
 		edges,

package/dist/index.cjs

@@ -2878,7 +2878,8 @@ function parseAsl(params) {
 	});
 	return {
 		edges: assignEdgeIds({ edges }),
-		nodes
+		nodes,
+		startId: resolver.resolve("", definition.StartAt)
 	};
 }
 /**
@@ -6604,11 +6605,15 @@ ${playbackRules(palette)}
 * Mermaid numeric-entity escapes for characters that are significant to
 * `stateDiagram-v2` syntax: `#` introduces an entity itself, `"` and `;` end a
 * label or statement early, `<`/`>` and `{`/`}` are HTML/composite-state
-* syntax, and a backtick can break Markdown-flavoured label rendering.
+* syntax, and a backtick can break Markdown-flavoured label rendering. Mermaid
+* up to at least 11.4.1 also rejects a `:` inside a state description or an
+* edge label (`A: Rejected (error: X)`), and renderers that bundle an older
+* Mermaid (a self-managed GitLab, an editor preview) are still in use.
 */
 const MERMAID_LABEL_ENTITIES = {
 	"#": "#35;",
 	"\"": "#quot;",
+	":": "#58;",
 	";": "#59;",
 	"<": "#60;",
 	">": "#62;",
@@ -6803,7 +6808,7 @@ var MermaidRenderer = class {
 	* a literal `-->` inside a label, so no separate arrow rule is needed.
 	*/
 	escapeLabel(label) {
-		return label.replace(/[#";<>{}`]/g, (character) => MERMAID_LABEL_ENTITIES[character]).replace(/\n/g, " ");
+		return label.replace(/[#":;<>{}`]/g, (character) => MERMAID_LABEL_ENTITIES[character]).replace(/\n/g, " ");
 	}
 	/**
 	* Build the lines of one scope: its `[*]` entry, state label lines, nested
@@ -6879,10 +6884,13 @@ var MermaidRenderer = class {
 	/**
 	* Find the start state from the ASL definition's StartAt or, without one, the
 	* first top-level state nothing else transitions to.
+	*
+	* StartAt is resolved to a node id the way the parser resolved it, because the id
+	* can differ from the name (a sanitized character, or a discriminator).
 	*/
 	findStartState(params) {
 		const { asl, root } = params;
-		if (asl?.StartAt) return asl.StartAt;
+		if (asl?.StartAt) return buildIdResolver({ definition: asl }).resolve("", asl.StartAt);
 		const targetIds = new Set(root.transitions.filter((edge) => edge.from !== edge.to).map((edge) => edge.to));
 		return root.memberIds.find((id) => !targetIds.has(id)) ?? root.memberIds[0];
 	}
@@ -8308,7 +8316,7 @@ function buildDiagramGraph(params) {
 		edges: parsed.edges,
 		mode: options.catchHandling,
 		nodes: parsed.nodes,
-		startStateId: definition.StartAt
+		startStateId: parsed.startId
 	});
 	return {
 		edges,

package/dist/index.js

@@ -2855,7 +2855,8 @@ function parseAsl(params) {
 	});
 	return {
 		edges: assignEdgeIds({ edges }),
-		nodes
+		nodes,
+		startId: resolver.resolve("", definition.StartAt)
 	};
 }
 /**
@@ -6581,11 +6582,15 @@ ${playbackRules(palette)}
 * Mermaid numeric-entity escapes for characters that are significant to
 * `stateDiagram-v2` syntax: `#` introduces an entity itself, `"` and `;` end a
 * label or statement early, `<`/`>` and `{`/`}` are HTML/composite-state
-* syntax, and a backtick can break Markdown-flavoured label rendering.
+* syntax, and a backtick can break Markdown-flavoured label rendering. Mermaid
+* up to at least 11.4.1 also rejects a `:` inside a state description or an
+* edge label (`A: Rejected (error: X)`), and renderers that bundle an older
+* Mermaid (a self-managed GitLab, an editor preview) are still in use.
 */
 const MERMAID_LABEL_ENTITIES = {
 	"#": "#35;",
 	"\"": "#quot;",
+	":": "#58;",
 	";": "#59;",
 	"<": "#60;",
 	">": "#62;",
@@ -6780,7 +6785,7 @@ var MermaidRenderer = class {
 	* a literal `-->` inside a label, so no separate arrow rule is needed.
 	*/
 	escapeLabel(label) {
-		return label.replace(/[#";<>{}`]/g, (character) => MERMAID_LABEL_ENTITIES[character]).replace(/\n/g, " ");
+		return label.replace(/[#":;<>{}`]/g, (character) => MERMAID_LABEL_ENTITIES[character]).replace(/\n/g, " ");
 	}
 	/**
 	* Build the lines of one scope: its `[*]` entry, state label lines, nested
@@ -6856,10 +6861,13 @@ var MermaidRenderer = class {
 	/**
 	* Find the start state from the ASL definition's StartAt or, without one, the
 	* first top-level state nothing else transitions to.
+	*
+	* StartAt is resolved to a node id the way the parser resolved it, because the id
+	* can differ from the name (a sanitized character, or a discriminator).
 	*/
 	findStartState(params) {
 		const { asl, root } = params;
-		if (asl?.StartAt) return asl.StartAt;
+		if (asl?.StartAt) return buildIdResolver({ definition: asl }).resolve("", asl.StartAt);
 		const targetIds = new Set(root.transitions.filter((edge) => edge.from !== edge.to).map((edge) => edge.to));
 		return root.memberIds.find((id) => !targetIds.has(id)) ?? root.memberIds[0];
 	}
@@ -8285,7 +8293,7 @@ function buildDiagramGraph(params) {
 		edges: parsed.edges,
 		mode: options.catchHandling,
 		nodes: parsed.nodes,
-		startStateId: definition.StartAt
+		startStateId: parsed.startId
 	});
 	return {
 		edges,

package/dist/png.cjs

@@ -23,6 +23,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 let d3_shape = require("d3-shape");
 let _dagrejs_dagre = require("@dagrejs/dagre");
 _dagrejs_dagre = __toESM(_dagrejs_dagre, 1);
+let node_os = require("node:os");
 let node_fs = require("node:fs");
 let node_path = require("node:path");
 // src/config/withoutUndefined.ts
@@ -2634,7 +2635,8 @@ function parseAsl(params) {
 	});
 	return {
 		edges: assignEdgeIds({ edges }),
-		nodes
+		nodes,
+		startId: resolver.resolve("", definition.StartAt)
 	};
 }
 /**
@@ -6337,7 +6339,7 @@ function buildDiagramGraph(params) {
 		edges: parsed.edges,
 		mode: options.catchHandling,
 		nodes: parsed.nodes,
-		startStateId: definition.StartAt
+		startStateId: parsed.startId
 	});
 	return {
 		edges,
@@ -7330,6 +7332,33 @@ function resolvePngFontOptions(params) {
 	};
 }
 // src/exporters/resvgEngine.ts
+/** Bytes per pixel in resvg's RGBA output pixmap. */
+const PIXMAP_BYTES_PER_PIXEL = 4;
+/** Bytes in a GiB, for error messages. */
+const GIB = 2 ** 30;
+/**
+* Rounded intrinsic width below which {@link maxIntrinsicAspect} reads the exact size,
+* keeping the rounding bound within about 1% where it is used.
+*/
+const EXACT_SIZE_BELOW_WIDTH = 100;
+/**
+* The largest height-to-width ratio the SVG's intrinsic size can have, or 0 when it has
+* no width.
+*
+* resvg's `width` and `height` getters round to whole pixels, so each true side lies
+* within 0.5 of its getter and `(height + 0.5) / (width - 0.5)` bounds the true ratio
+* from above. That bound is loose for a narrow SVG (3x at 1 x 1) and missing when the
+* width rounds to 0, so below {@link EXACT_SIZE_BELOW_WIDTH} the exact size is read
+* from the serialized root element instead. Every SVG this package generates is wider.
+*/
+function maxIntrinsicAspect(params) {
+	const { intrinsic } = params;
+	if (intrinsic.width >= EXACT_SIZE_BELOW_WIDTH) return (intrinsic.height + .5) / (intrinsic.width - .5);
+	const root = /<svg\b[^>]*>/.exec(intrinsic.toString())?.[0] ?? "";
+	const exactWidth = Number(/\swidth="([^"]*)"/.exec(root)?.[1]);
+	const exactHeight = Number(/\sheight="([^"]*)"/.exec(root)?.[1]);
+	return exactWidth > 0 && exactHeight > 0 ? exactHeight / exactWidth : 0;
+}
 /**
 * Lazily load `@resvg/resvg-js`, which is an optional peer dependency. Keeping
 * it out of the static import graph means SVG/Mermaid-only consumers never
@@ -7357,7 +7386,14 @@ async function loadResvg() {
 async function renderResvgPng(params) {
 	const { backgroundColor, fontDirs, fontFamily, fontFiles, loadSystemFonts, preferredFamily, scale = 1, svg, width } = params;
 	if (!Number.isFinite(scale) || scale <= 0) throw new Error(`PNG export 'scale' must be a positive finite number, got ${scale}.`);
-	const { renderAsync } = await loadResvg();
+	const { Resvg, renderAsync } = await loadResvg();
+	const aspect = maxIntrinsicAspect({ intrinsic: new Resvg(svg, { font: { loadSystemFonts: false } }) });
+	const targetWidth = Math.round(width * scale);
+	const targetHeight = Math.ceil(targetWidth * aspect);
+	const pixmapBytes = targetWidth * targetHeight * PIXMAP_BYTES_PER_PIXEL;
+	const constrained = process.constrainedMemory?.() ?? 0;
+	const memoryBytes = constrained > 0 ? Math.min(constrained, (0, node_os.totalmem)()) : (0, node_os.totalmem)();
+	if (pixmapBytes > memoryBytes) throw new Error(`PNG export is too large: at scale ${scale} the image would be ${targetWidth} x ${targetHeight} pixels, which needs ${(pixmapBytes / GIB).toFixed(1)} GiB of memory, more than the ${(memoryBytes / GIB).toFixed(1)} GiB available.${scale > 1 ? " Use a smaller scale." : ""}`);
 	const font = resolvePngFontOptions({
 		fontDirs,
 		fontFamily,

package/dist/png.d.cts

@@ -779,7 +779,9 @@ interface PngExportOptions {
   loadSystemFonts?: boolean;
   /**
    * Multiplier applied to the diagram's rendered size. `resvg` only. Must be a
-   * positive finite number; anything else throws.
+   * positive finite number; anything else throws. Also throws when the resulting
+   * image would need more memory than the process can have (the machine's, or a
+   * container's limit), since resvg would otherwise abort the process.
    * @default 1
    */
   scale?: number;

package/dist/png.d.ts

@@ -779,7 +779,9 @@ interface PngExportOptions {
   loadSystemFonts?: boolean;
   /**
    * Multiplier applied to the diagram's rendered size. `resvg` only. Must be a
-   * positive finite number; anything else throws.
+   * positive finite number; anything else throws. Also throws when the resulting
+   * image would need more memory than the process can have (the machine's, or a
+   * container's limit), since resvg would otherwise abort the process.
    * @default 1
    */
   scale?: number;

package/dist/png.js

@@ -1,5 +1,6 @@
 import { curveBasis, line } from "d3-shape";
 import dagre from "@dagrejs/dagre";
+import { totalmem } from "node:os";
 import { closeSync, fstatSync, openSync, readSync, readdirSync, statSync } from "node:fs";
 import { delimiter, join } from "node:path";
 // src/config/withoutUndefined.ts
@@ -2611,7 +2612,8 @@ function parseAsl(params) {
 	});
 	return {
 		edges: assignEdgeIds({ edges }),
-		nodes
+		nodes,
+		startId: resolver.resolve("", definition.StartAt)
 	};
 }
 /**
@@ -6314,7 +6316,7 @@ function buildDiagramGraph(params) {
 		edges: parsed.edges,
 		mode: options.catchHandling,
 		nodes: parsed.nodes,
-		startStateId: definition.StartAt
+		startStateId: parsed.startId
 	});
 	return {
 		edges,
@@ -7307,6 +7309,33 @@ function resolvePngFontOptions(params) {
 	};
 }
 // src/exporters/resvgEngine.ts
+/** Bytes per pixel in resvg's RGBA output pixmap. */
+const PIXMAP_BYTES_PER_PIXEL = 4;
+/** Bytes in a GiB, for error messages. */
+const GIB = 2 ** 30;
+/**
+* Rounded intrinsic width below which {@link maxIntrinsicAspect} reads the exact size,
+* keeping the rounding bound within about 1% where it is used.
+*/
+const EXACT_SIZE_BELOW_WIDTH = 100;
+/**
+* The largest height-to-width ratio the SVG's intrinsic size can have, or 0 when it has
+* no width.
+*
+* resvg's `width` and `height` getters round to whole pixels, so each true side lies
+* within 0.5 of its getter and `(height + 0.5) / (width - 0.5)` bounds the true ratio
+* from above. That bound is loose for a narrow SVG (3x at 1 x 1) and missing when the
+* width rounds to 0, so below {@link EXACT_SIZE_BELOW_WIDTH} the exact size is read
+* from the serialized root element instead. Every SVG this package generates is wider.
+*/
+function maxIntrinsicAspect(params) {
+	const { intrinsic } = params;
+	if (intrinsic.width >= EXACT_SIZE_BELOW_WIDTH) return (intrinsic.height + .5) / (intrinsic.width - .5);
+	const root = /<svg\b[^>]*>/.exec(intrinsic.toString())?.[0] ?? "";
+	const exactWidth = Number(/\swidth="([^"]*)"/.exec(root)?.[1]);
+	const exactHeight = Number(/\sheight="([^"]*)"/.exec(root)?.[1]);
+	return exactWidth > 0 && exactHeight > 0 ? exactHeight / exactWidth : 0;
+}
 /**
 * Lazily load `@resvg/resvg-js`, which is an optional peer dependency. Keeping
 * it out of the static import graph means SVG/Mermaid-only consumers never
@@ -7334,7 +7363,14 @@ async function loadResvg() {
 async function renderResvgPng(params) {
 	const { backgroundColor, fontDirs, fontFamily, fontFiles, loadSystemFonts, preferredFamily, scale = 1, svg, width } = params;
 	if (!Number.isFinite(scale) || scale <= 0) throw new Error(`PNG export 'scale' must be a positive finite number, got ${scale}.`);
-	const { renderAsync } = await loadResvg();
+	const { Resvg, renderAsync } = await loadResvg();
+	const aspect = maxIntrinsicAspect({ intrinsic: new Resvg(svg, { font: { loadSystemFonts: false } }) });
+	const targetWidth = Math.round(width * scale);
+	const targetHeight = Math.ceil(targetWidth * aspect);
+	const pixmapBytes = targetWidth * targetHeight * PIXMAP_BYTES_PER_PIXEL;
+	const constrained = process.constrainedMemory?.() ?? 0;
+	const memoryBytes = constrained > 0 ? Math.min(constrained, totalmem()) : totalmem();
+	if (pixmapBytes > memoryBytes) throw new Error(`PNG export is too large: at scale ${scale} the image would be ${targetWidth} x ${targetHeight} pixels, which needs ${(pixmapBytes / GIB).toFixed(1)} GiB of memory, more than the ${(memoryBytes / GIB).toFixed(1)} GiB available.${scale > 1 ? " Use a smaller scale." : ""}`);
 	const font = resolvePngFontOptions({
 		fontDirs,
 		fontFamily,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sfn-diagram",
-  "version": "1.9.0",
+  "version": "1.9.1",
   "description": "Generate SVG, Mermaid, HTML, and PNG diagrams from AWS Step Functions ASL definitions, CloudFormation/CDK templates, Terraform configs, or live AWS state machines",
   "type": "module",
   "packageManager": "pnpm@9.15.9",