Agent CLI dark diagram text and Bitwarden table

What persists table (Bitwarden CLI)

The AsciiDoc table under What persists put the header row before |=== (Markdown-style), so Asciidoctor treated later cells as a broken single-column table on the docs hub.

Moved the header inside the table block and set [cols="1,2"].

Dark-mode text on agent CLI + rules geography diagrams

agent-cli-auth-flow.svg is shared by Bitwarden CLI (agents) and gcloud CLI (agents). rules-geography.svg had the same Mermaid text inheritance bug.

Surfaces and borders already followed color.* tokens, but Mermaid still emitted hardcoded dark text:

  • #my-svg { fill: #0f172a } (inherited by <text>)

  • #my-svg .label / .label text color: #0f172a

Prior manifest bindings targeted fill on selectors that only declare color, so those rewrites never applied.

Added stylesheet (and root svg presentation color) bindings for the real Mermaid properties on both manifests; regenerated adaptive/host SVGs with @dev-centr/themed-svg 0.2.2 + @dev-centr/mermaid-svg-css-vars 0.1.3. Refreshed fixedSha256 pins to match committed .fixed.svg bytes.

Generate-time WARN

scripts/themed-svg-dark-text-check.mjs (called from scripts/generate-themed-diagrams.mjs) prints:

WARN themed-svg dark-mode text: <file>: root #my-svg fill is a hardcoded color …​

when an adaptive SVG still has hardcoded root fill / label color under a dark media preset. The docs hub Antora extension lib/verify-themed-svg-dark-mode.js applies the same check across content images at contentClassified.

Borrow from light (WARN policy)

Authors may keep dark-preset token values identical to light for intentional light islands, and may list ids in borrowFromLight (stripped before the Themed SVG transformer).

The dark-text checker treats equal light/dark values (and borrowFromLight) as borrowed. Parent→child: a borrowed surface/canvas expects nested text tokens (color.text.on-*) to borrow too; a changed darker surface/canvas with text that still borrows light WARNs (dark-on-dark). Light-stable figures (canvas + color.text.primary both borrowed) do not WARN about Mermaid’s hardcoded root fill.