feat: enforce strict linting/typechecking, refactor theme controller, and sync cdd-web-ui

- Add strict TypeScript configuration (tsconfig.json), Flat ESLint with 100% JSDoc coverage (eslint.config.js), Stylelint (.stylelintrc.json), html-validate (.htmlvalidate.json), and Husky pre-commit hook (.husky/pre-commit) blocking staged WASM binaries.
- Add multi-page Vite build config (vite.config.js) and cross-platform build automation (Makefile, make.bat) for building and syncing cdd-web-ui without WASM assets.
- Refactor script.js into modular, JSDoc-typed theme controller functions with live prefers-color-scheme synchronization, ARIA state management, and safe storage fallbacks.
- Expand script.test.js with unit and real-DOM integration tests for index.html and ecosystem.html at 100% coverage.
- Refactor styles.css to use CSS custom properties for light/dark themes, remove !important overrides and inline styles, and improve accessibility and responsive layouts.
- Deduplicate inline Mermaid SVG IDs in index.html, ecosystem.html, and mmd_gen.sh, and add semantic ARIA attributes.
- Harden .github/workflows/deploy-cdd-web-ui.yml with main-site validation, retry/size checks for WASM artifacts, and updated GitHub Actions versions.
- Update cdd-web-ui production bundle and cdd-docs-ui Arazzo/OpenAPI 3.2.0 artifacts and type definitions.

Author: SamuelMarks

.github/workflows/deploy-cdd-web-ui.yml

@@ -2,7 +2,7 @@ name: Deploy Web UI to GitHub Pages
 
 on:
   push:
-    branches: [main, master]
+    branches: [master]
   workflow_dispatch:
 
 permissions:
@@ -18,40 +18,48 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout main site (offscale.github.io)
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           path: main-site
 
       - name: Checkout cdd-web-ui
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           repository: SamuelMarks/cdd-web-ui
           path: cdd-web-ui
 
       - name: Checkout cdd-docs-ui
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           repository: SamuelMarks/cdd-docs-ui
           path: cdd-docs-ui
 
       - name: Checkout cdd-ctl
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           repository: SamuelMarks/cdd-ctl
           path: cdd-ctl
 
       - name: Checkout cdd-openapi-test-harness
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           repository: SamuelMarks/cdd-openapi-test-harness
           path: cdd-openapi-test-harness
           submodules: recursive
 
       - name: Setup Node.js
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v7
         with:
           node-version: 20
 
+      - name: Validate and Test Main Site (offscale.github.io)
+        working-directory: ./main-site
+        run: |
+          npm ci --ignore-scripts
+          npm run typecheck
+          npm run lint
+          npm test
+
       - name: Install Binaryen
         run: sudo apt-get update && sudo apt-get install -y binaryen
 
@@ -83,17 +91,21 @@ jobs:
             wasm-opt -O3 "$wasm_file" -o "./optimized-wasm/$filename" || cp "$wasm_file" "./optimized-wasm/$filename"
           done
 
-          # Download JS Wrappers and C# Zip manually since fetch_wasm.sh skips them
-          curl -sL -o ./optimized-wasm/cdd-ts.js "https://github.com/offscale/cdd-ts/releases/latest/download/cdd-ts.js" || true
-          curl -sL -o ./optimized-wasm/cdd-ts-javy.wasm "https://github.com/offscale/cdd-ts/releases/latest/download/cdd-ts-javy.wasm" || true
-          curl -sL -o ./optimized-wasm/cdd-java.js "https://github.com/SamuelMarks/cdd-java/releases/latest/download/cdd-java.js" || true
-          curl -sL -o ./cdd-csharp-wasm.zip "https://github.com/SamuelMarks/cdd-csharp/releases/latest/download/cdd-csharp-wasm.zip" || true
-          curl -sL -o ./optimized-wasm/openapi_python_client-0.0.1-py3-none-any.whl "https://github.com/offscale/cdd-python-all/releases/latest/download/openapi_python_client-0.0.1-py3-none-any.whl" || true
-          
-          # Force python-all, java, and ts to true in the generated JSON since they are now present
-          sed -i 's/"python-all": false/"python-all": true/g' cdd-ctl-wasm-sdk/assets/wasm-support.json || true
-          sed -i 's/"java": false/"java": true/g' cdd-ctl-wasm-sdk/assets/wasm-support.json || true
-          sed -i 's/"ts": false/"ts": true/g' cdd-ctl-wasm-sdk/assets/wasm-support.json || true
+          # Download JS Wrappers and C# Zip with explicit failure reporting and retries
+          curl -fsSL --retry 3 -o ./optimized-wasm/cdd-ts.js "https://github.com/offscale/cdd-ts/releases/latest/download/cdd-ts.js"
+          curl -fsSL --retry 3 -o ./optimized-wasm/cdd-ts-javy.wasm "https://github.com/offscale/cdd-ts/releases/latest/download/cdd-ts-javy.wasm"
+          curl -fsSL --retry 3 -o ./optimized-wasm/cdd-java.js "https://github.com/SamuelMarks/cdd-java/releases/latest/download/cdd-java.js"
+          curl -fsSL --retry 3 -o ./cdd-csharp-wasm.zip "https://github.com/SamuelMarks/cdd-csharp/releases/latest/download/cdd-csharp-wasm.zip"
+          curl -fsSL --retry 3 -o ./optimized-wasm/openapi_python_client-0.0.1-py3-none-any.whl "https://github.com/offscale/cdd-python-all/releases/latest/download/openapi_python_client-0.0.1-py3-none-any.whl"
+
+          # Enable python-all, java, and ts in wasm-support.json only after verifying downloads succeeded
+          test -s ./optimized-wasm/openapi_python_client-0.0.1-py3-none-any.whl
+          test -s ./optimized-wasm/cdd-java.js
+          test -s ./optimized-wasm/cdd-ts.js
+          test -s ./optimized-wasm/cdd-ts-javy.wasm
+          sed -i 's/"python-all": false/"python-all": true/g' cdd-ctl-wasm-sdk/assets/wasm-support.json
+          sed -i 's/"java": false/"java": true/g' cdd-ctl-wasm-sdk/assets/wasm-support.json
+          sed -i 's/"ts": false/"ts": true/g' cdd-ctl-wasm-sdk/assets/wasm-support.json
 
       - name: Build cdd-docs-ui
         working-directory: ./cdd-docs-ui
@@ -108,11 +120,11 @@ jobs:
       - name: Copy WASM Binaries to Web UI
         run: |
           mkdir -p cdd-web-ui/public/assets/wasm/
-          cp cdd-ctl/optimized-wasm/*.wasm cdd-web-ui/public/assets/wasm/ || true
-          cp cdd-ctl/optimized-wasm/*.js cdd-web-ui/public/assets/wasm/ || true
-          cp cdd-ctl/optimized-wasm/*.whl cdd-web-ui/public/assets/wasm/ || true
-          unzip -q cdd-ctl/cdd-csharp-wasm.zip -d cdd-web-ui/public/assets/wasm/ || true
-          cp cdd-ctl/cdd-ctl-wasm-sdk/assets/wasm-support.json cdd-web-ui/public/assets/wasm-support.json || true
+          cp cdd-ctl/optimized-wasm/*.wasm cdd-web-ui/public/assets/wasm/
+          cp cdd-ctl/optimized-wasm/*.js cdd-web-ui/public/assets/wasm/
+          cp cdd-ctl/optimized-wasm/*.whl cdd-web-ui/public/assets/wasm/
+          unzip -q -o cdd-ctl/cdd-csharp-wasm.zip -d cdd-web-ui/public/assets/wasm/
+          cp cdd-ctl/cdd-ctl-wasm-sdk/assets/wasm-support.json cdd-web-ui/public/assets/wasm-support.json
 
       - name: Compute base-href and Build Angular App
         working-directory: ./cdd-web-ui

.gitignore

@@ -11,6 +11,7 @@ ml.svg
 c_multiplatform.svg
 sdk_cli_docs.svg
 interactive_docs.svg
+openapi.svg
 
 # Temporary files
 1.html
@@ -22,9 +23,8 @@ __pycache__/
 *.py[cod]
 *.class
 
-openapi.svg
+# Build & Coverage Artifacts
 cdd-web-ui/assets/wasm/
 cdd-web-ui/browser/
-node_modules/
 dist/
 coverage/

.htmlvalidate.json

@@ -0,0 +1,12 @@
+{
+  "extends": ["html-validate:recommended"],
+  "rules": {
+    "no-dup-id": "error",
+    "no-inline-style": "error",
+    "no-deprecated-attr": "error",
+    "wcag/h32": "off",
+    "no-trailing-whitespace": "off",
+    "void-style": "off",
+    "attr-quotes": "error"
+  }
+}

.husky/pre-commit

@@ -0,0 +1,12 @@
+#!/usr/bin/env sh
+# Pre-commit hook enforcing 100% doc coverage, strong typing, lint checks, 100% test coverage, and zero staged WASM binaries.
+set -e
+
+if git diff --cached --name-only | grep -q '^cdd-web-ui/assets/wasm/'; then
+    echo "ERROR: Attempted to commit compiled WASM assets in cdd-web-ui/assets/wasm/. See GEMINI.md." >&2
+    exit 1
+fi
+
+npm run typecheck
+npm run lint
+npm test

.stylelintrc.json

@@ -0,0 +1,26 @@
+{
+  "extends": ["stylelint-config-standard"],
+  "rules": {
+    "declaration-no-important": true,
+    "no-duplicate-selectors": true,
+    "declaration-block-no-duplicate-properties": true,
+    "color-hex-length": null,
+    "alpha-value-notation": null,
+    "color-function-notation": null,
+    "color-function-alias-notation": null,
+    "value-keyword-case": null,
+    "custom-property-empty-line-before": null,
+    "rule-empty-line-before": null,
+    "comment-empty-line-before": null,
+    "declaration-empty-line-before": null,
+    "declaration-block-single-line-max-declarations": null,
+    "selector-class-pattern": null,
+    "selector-id-pattern": null,
+    "keyframes-name-pattern": null,
+    "media-feature-range-notation": null,
+    "shorthand-property-no-redundant-values": null,
+    "font-family-name-quotes": null,
+    "no-descending-specificity": null,
+    "property-no-vendor-prefix": null
+  }
+}

Makefile

@@ -0,0 +1,27 @@
+.PHONY: all build build_cdd_web_ui test lint typecheck clean
+
+all: build
+
+build_cdd_web_ui:
+	@echo "Building ../cdd-web-ui (production)..."
+	cd ../cdd-web-ui && ([ -d node_modules/@angular/build ] || npm install) && npm run build:prod -- --base-href /cdd-web-ui/
+	@echo "Syncing ../cdd-web-ui/dist/cdd-web-ui/browser into ./cdd-web-ui..."
+	rm -rf cdd-web-ui
+	mkdir -p cdd-web-ui
+	cp -r ../cdd-web-ui/dist/cdd-web-ui/browser/* cdd-web-ui/
+	rm -rf cdd-web-ui/assets/wasm
+
+build: build_cdd_web_ui
+	npm run build
+
+test:
+	npm test
+
+lint:
+	npm run lint
+
+typecheck:
+	npm run typecheck
+
+clean:
+	rm -rf dist coverage

README.md

@@ -1,5 +1,7 @@
 # Offscale.github.io
 
+[![Deploy Web UI to GitHub Pages](https://github.com/offscale/offscale.github.io/actions/workflows/deploy-cdd-web-ui.yml/badge.svg)](https://github.com/offscale/offscale.github.io/actions/workflows/deploy-cdd-web-ui.yml)
+
 This repository hosts the source code for the **Offscale** landing page: [offscale.github.io](https://offscale.github.io).
 
 Offscale provides modern, rapid application tools, bringing "new compilers to 'solve' software."