fix(v0.41.0-alpha1): add missing deps from rebase and fix CI gates

- Add sanitize-html + @types/sanitize-html to adapter-vite and content deno.json
- Change markdown.ts and head-injection.ts to use bare import from imports map
- Add flexsearch to root deno.json (needed by open-search island)
- Remove @openelement/protocol from removedPackages in check-package-surface.ts
- Fix trailing newline formatting issues

Verification:
- deno task test: 894 passed, 0 failed
- deno task autoflow:push: 5/5 gates PASS (fmt:check, lint, typecheck, graph:check, package-surface:check)
- deno task build: passed

Author: DevBot

deno.json

@@ -24,7 +24,8 @@
     "@playwright/test": "npm:@playwright/test@1.59.1",
     "preact": "npm:preact@^10.28.0",
     "preact-render-to-string": "npm:preact-render-to-string@^6.5.0",
-    "@preact/signals-core": "npm:@preact/signals-core@^1.12.1"
+    "@preact/signals-core": "npm:@preact/signals-core@^1.12.1",
+    "flexsearch": "npm:flexsearch@^0.7"
   },
   "vendor": true,
   "nodeModulesDir": "manual",

deno.lock

@@ -123,4 +123,4 @@ Build/test gates: `deno task test`, `deno task test:coverage:check`,
 - `docs/release/v0.41.0.md` summarizing the distribution migration.
 - Updated `docs/status/STATUS.md` active line section.
 - Updated `docs/roadmap/ROADMAP.md` version ladder and v0.41.0 section.
-- CI run evidence showing `deno-api:check` and `pack:dry-run` pass.
+- CI run evidence showing `deno-api:check` and `pack:dry-run` pass.

docs/current/VERSION_PLAN.md

@@ -116,4 +116,4 @@ record the npm outcome truthfully.
 
 `deno task workflow:check` verifies that the workflow itself remains visible and
 that the active version plan has the required shape. AutoFlow3 is the single
-gate and evidence control plane for hooks and CI.
+gate and evidence control plane for hooks and CI.

docs/governance/PROJECT_WORKFLOW.md

@@ -16,6 +16,8 @@
   "imports": {
     "@mdx-js/rollup": "npm:@mdx-js/rollup@^3.1.1",
     "@hono/vite-dev-server": "npm:@hono/vite-dev-server@^0.25.3",
+    "sanitize-html": "npm:sanitize-html@^2.17.4",
+    "@types/sanitize-html": "npm:@types/sanitize-html@^2",
     "vite": "npm:vite@8.0.10"
   },
   "tasks": {

packages/adapter-vite/deno.json

@@ -16,7 +16,7 @@ import { OpenElementError } from '@openelement/core/errors';
 import { escapeAttr as escapeHtmlAttr } from '@openelement/core';
 import { createLogger } from '@openelement/core/logger';
 // @deno-types="npm:@types/sanitize-html@^2"
-import sanitizeHtml, { type IOptions as SanitizeHtmlOptions } from 'npm:sanitize-html@^2.17.4';
+import sanitizeHtml, { type IOptions as SanitizeHtmlOptions } from 'sanitize-html';
 
 const log = createLogger('adapter-vite:head-injection');
 

packages/adapter-vite/src/head-injection.ts

@@ -14,6 +14,8 @@
     "marked": "npm:marked@^15",
     "gray-matter": "npm:gray-matter@^4.0.3",
     "@mdx-js/mdx": "npm:@mdx-js/mdx@^3.1.1",
+    "sanitize-html": "npm:sanitize-html@^2.17.4",
+    "@types/sanitize-html": "npm:@types/sanitize-html@^2",
     "vite": "npm:vite@8.0.10"
   },
   "publish": {

packages/content/deno.json

@@ -7,7 +7,7 @@
 import matter from 'gray-matter';
 import { marked } from 'marked';
 // @deno-types="npm:@types/sanitize-html@^2"
-import sanitizeHtml from 'npm:sanitize-html@^2.17.4';
+import sanitizeHtml from 'sanitize-html';
 import type { BlogPost, OpenElementBlogOptions } from './types.ts';
 
 /**

packages/content/src/blog/markdown.ts

@@ -422,4 +422,4 @@ export async function runCaptured(command: string[]): Promise<string> {
     throw new Error(`${command.join(' ')} failed with exit ${output.code}\n${stdout}${stderr}`);
   }
   return stdout;
-}
+}

tools/autoflow/release.ts

@@ -23,7 +23,6 @@ const removedPackages = [
   '@openelement/compat-check',
   '@openelement/elements',
   '@openelement/hub',
-  '@openelement/protocol',
   '@openelement/protocols',
   '@openelement/rpc',
   '@openelement/runtime',