chore(ci): update installations via mise

- Updated Node.js version from 26.1.0 to 26.4.0 in `.nvmrc`, `package.json`, and documentation.
- Upgraded pnpm from 11.0.8 to 11.9.0 across relevant files.
- Replaced references to nvm with mise for managing the development environment and CI setup.
- Enhanced `.gitignore` to exclude visual build artifacts more effectively.
- Removed the Vale installation script and integrated its management through mise.
- Updated CI configuration to utilize the new setup process with mise.

Signed-off-by: Cory Rylan <crylan@nvidia.com>

Author: coryrylan

.agents/hooks/lib/node-env.sh

@@ -1,41 +1,66 @@
 #!/usr/bin/env bash
 
-get_hook_pnpm_spec() {
-  local project_root package_manager
+resolve_hook_mise_bin() {
+  if [[ -n "${MISE_BIN:-}" && -x "$MISE_BIN" ]]; then
+    printf '%s\n' "$MISE_BIN"
+    return 0
+  fi
 
-  project_root="$1"
-  package_manager=""
+  if command -v mise >/dev/null 2>&1; then
+    command -v mise
+    return 0
+  fi
 
-  if [[ -f "$project_root/package.json" ]] && command -v node >/dev/null 2>&1; then
-    package_manager=$(node -e "const { readFileSync } = require('node:fs'); const { packageManager } = JSON.parse(readFileSync(process.argv[1], 'utf8')); if (typeof packageManager === 'string' && packageManager.startsWith('pnpm@')) process.stdout.write(packageManager);" "$project_root/package.json")
+  if [[ -x "$HOME/.local/bin/mise" ]]; then
+    printf '%s\n' "$HOME/.local/bin/mise"
+    return 0
   fi
 
-  printf '%s\n' "${package_manager:-pnpm@latest}"
+  return 1
+}
+
+setup_hook_mise_env() {
+  MISE_BIN=$(resolve_hook_mise_bin) || {
+    echo "mise not found. Install mise, then run 'mise trust' at the project root." >&2
+    return 1
+  }
+
+  export MISE_BIN
+  export PATH="$(dirname -- "$MISE_BIN"):$PATH"
 }
 
 setup_hook_node_env() {
-  local project_root node_version nvm_dir pnpm_spec
+  local project_root
 
   project_root="$1"
-  nvm_dir="${NVM_DIR:-$HOME/.nvm}"
+  setup_hook_mise_env || return 1
 
-  if [[ -s "$nvm_dir/nvm.sh" ]]; then
-    source "$nvm_dir/nvm.sh"
+  (
+    cd "$project_root"
+    "$MISE_BIN" exec -- node --version >/dev/null
+    "$MISE_BIN" exec -- pnpm --version >/dev/null
+  ) || {
+    echo "mise project tools are unavailable. Run 'mise trust' and 'mise install' at the project root." >&2
+    return 1
+  }
+}
 
-    if [[ -f "$project_root/.nvmrc" ]]; then
-      node_version=$(<"$project_root/.nvmrc")
-      nvm use --silent "$node_version" >/dev/null 2>&1 || true
-    else
-      nvm use --silent >/dev/null 2>&1 || true
-    fi
-  fi
+hook_mise_exec() {
+  local working_dir="$1"
+  shift
 
-  if ! command -v pnpm >/dev/null 2>&1 && command -v corepack >/dev/null 2>&1; then
-    pnpm_spec=$(get_hook_pnpm_spec "$project_root")
-    (
-      cd "$project_root"
-      corepack enable
-      corepack prepare "$pnpm_spec" --activate
-    )
-  fi
+  (
+    cd "$working_dir"
+    "$MISE_BIN" exec -- "$@"
+  )
+}
+
+hook_mise_run() {
+  local working_dir="$1"
+  shift
+
+  (
+    cd "$working_dir"
+    "$MISE_BIN" run "$@"
+  )
 }

.agents/hooks/post-tool-use-edit-write.sh

@@ -14,12 +14,7 @@ fi
 
 FAILED=0
 
-setup_hook_node_env "$PROJECT_ROOT"
-
-if ! command -v pnpm >/dev/null 2>&1; then
-  echo "pnpm not found after loading the project Node environment." >&2
-  exit 2
-fi
+setup_hook_node_env "$PROJECT_ROOT" || exit 2
 
 mark_failed() {
   FAILED=1
@@ -28,7 +23,7 @@ mark_failed() {
 run_prettier() {
   local output exit_code
 
-  output=$(cd "$PROJECT_ROOT" && pnpm exec prettier --write --ignore-unknown --no-error-on-unmatched-pattern "$FILE_PATH" 2>&1) || exit_code=$?
+  output=$(hook_mise_exec "$PROJECT_ROOT" pnpm exec prettier --write --ignore-unknown --no-error-on-unmatched-pattern "$FILE_PATH" 2>&1) || exit_code=$?
 
   if [[ ${exit_code:-0} -ne 0 && -n "$output" ]]; then
     echo "$output" >&2
@@ -66,7 +61,7 @@ run_eslint() {
 
   local soft_rules="no-unused-vars|@typescript-eslint/no-unused-vars"
 
-  json_output=$(cd "$project_dir" && pnpm exec eslint -c ./eslint.config.js --no-warn-ignored --cache --cache-location .eslintcache/ --format json "$rel_path" 2>/dev/null) || true
+  json_output=$(hook_mise_exec "$project_dir" pnpm exec eslint -c ./eslint.config.js --no-warn-ignored --cache --cache-location .eslintcache/ --format json "$rel_path" 2>/dev/null) || true
 
   hard_errors=$(echo "$json_output" | jq -r --arg soft "$soft_rules" '
     [.[].messages[] | select(.severity == 2) | select(.ruleId | test($soft) | not)] | length
@@ -80,7 +75,7 @@ run_eslint() {
     return 0
   fi
 
-  readable=$(cd "$project_dir" && pnpm exec eslint -c ./eslint.config.js --no-warn-ignored --color --cache --cache-location .eslintcache/ "$rel_path" 2>&1) || true
+  readable=$(hook_mise_exec "$project_dir" pnpm exec eslint -c ./eslint.config.js --no-warn-ignored --color --cache --cache-location .eslintcache/ "$rel_path" 2>&1) || true
 
   if [[ "$hard_errors" != "0" ]]; then
     echo "$readable" >&2
@@ -106,7 +101,7 @@ run_vale() {
 
   local output exit_code
 
-  output=$(cd "$PROJECT_ROOT" && config/vale/bin/vale --config .vale.ini "$FILE_PATH" 2>&1) || exit_code=$?
+  output=$(hook_mise_exec "$PROJECT_ROOT" vale --config .vale.ini "$FILE_PATH" 2>&1) || exit_code=$?
 
   if [[ ${exit_code:-0} -ne 0 && -n "$output" ]]; then
     echo "$output" >&2
@@ -143,7 +138,7 @@ run_stylelint() {
 
   rel_path=$(hook_relative_path "$project_dir" "$FILE_PATH")
 
-  output=$(cd "$project_dir" && pnpm exec stylelint --config="$repo_root/stylelint.config.mjs" --color "$rel_path" 2>&1) || exit_code=$?
+  output=$(hook_mise_exec "$project_dir" pnpm exec stylelint --config="$repo_root/stylelint.config.mjs" --color "$rel_path" 2>&1) || exit_code=$?
 
   if [[ ${exit_code:-0} -ne 0 && -n "$output" ]]; then
     echo "$output" >&2

.agents/hooks/pre-tool-use-bash.sh

@@ -7,8 +7,9 @@ source "$HOOK_DIR/lib/project-root.sh"
 COMMAND=$(hook_command_from_input "$INPUT" || true)
 GIT_PREFIX='(^|[;&|][[:space:]]*)git([[:space:]]+(-C[[:space:]]+[^[:space:];&|]+|--no-pager|-c[[:space:]]+[^[:space:];&|]+|--work-tree(=|[[:space:]]+)[^[:space:];&|]+))*[[:space:]]+'
 
-if [[ -z "${NVE_AGENT:-}" && -n "${CURSOR_AGENT+x}" && -z "${CURSOR_SANDBOX+x}" ]]; then
-  export NVE_AGENT="cursor-cloud-agent"
+HOOK_OS=$(uname -s 2>/dev/null || true)
+if [[ -z "${NVE_AGENT:-}" && "$HOOK_OS" != "Darwin" ]]; then
+  export NVE_AGENT="isolated"
 fi
 
 # Exit early if not a git command
@@ -37,7 +38,7 @@ block() {
 }
 
 handle_blocked_operation() {
-  if [[ "${NVE_AGENT:-}" == *cloud* ]]; then
+  if [[ "${NVE_AGENT:-}" == "isolated" ]]; then
     warn "$1"
   fi
 
@@ -52,6 +53,7 @@ echo "$COMMAND" | grep -qF "checkout -- ."   && handle_blocked_operation "git ch
 echo "$COMMAND" | grep -qF "branch -D"       && handle_blocked_operation "git branch -D force-deletes a branch without merge checks"
 
 echo "$COMMAND" | grep -qE "${GIT_PREFIX}(add|stage)([[:space:]]|$)" && handle_blocked_operation "git add/stage modifies the index"
+echo "$COMMAND" | grep -qE "${GIT_PREFIX}commit([[:space:]][^;&|]*)?[[:space:]](--all|-[^-[:space:];&|]*a[^[:space:];&|]*)([[:space:]]|$)" && handle_blocked_operation "git commit -a stages tracked changes before committing"
 echo "$COMMAND" | grep -qE "${GIT_PREFIX}restore([[:space:]][^;&|]*)?[[:space:]]--staged([[:space:]]|$)" && handle_blocked_operation "git restore --staged removes files from the index"
 echo "$COMMAND" | grep -qE "${GIT_PREFIX}reset([[:space:]]|$)" && handle_blocked_operation "git reset modifies the index or moves HEAD"
 echo "$COMMAND" | grep -qE "${GIT_PREFIX}rm([[:space:]][^;&|]*)?[[:space:]]--cached([[:space:]]|$)" && handle_blocked_operation "git rm --cached removes files from the index"

.agents/hooks/pre-tool-use-edit-write.sh

@@ -20,6 +20,8 @@ PROTECTED_FILES=(
   "package.json"
   "pnpm-lock.yaml"
   ".nvmrc"
+  "mise.toml"
+  "mise.lock"
   ".husky"
   "config"
 )

.agents/hooks/session-start.sh

@@ -10,25 +10,18 @@ PROJECT_ROOT=$(resolve_project_root "$INPUT" "$HOOK_DIR") || {
   exit 0
 }
 
-NVM_DIR="${NVM_DIR:-$HOME/.nvm}"
-if [[ -s "$NVM_DIR/nvm.sh" ]]; then
-  source "$NVM_DIR/nvm.sh"
-fi
-
 cd "$PROJECT_ROOT"
 
-if command -v nvm >/dev/null 2>&1; then
-  nvm install 2>&1 >/dev/null
-fi
-
-setup_hook_node_env "$PROJECT_ROOT"
+setup_hook_mise_env || exit 0
 
-INSTALL_OUTPUT=$(pnpm i --frozen-lockfile --prefer-offline 2>&1) || {
-  echo "pnpm install failed:" >&2
+INSTALL_OUTPUT=$(hook_mise_run "$PROJECT_ROOT" install 2>&1) || {
+  echo "mise install task failed:" >&2
   echo "$INSTALL_OUTPUT" >&2
   exit 0
 }
 
-NODE_V=$(node --version)
-PNPM_V=$(pnpm --version)
-echo "Environment ready: node $NODE_V, pnpm $PNPM_V. Dependencies installed."
+NODE_V=$(hook_mise_exec "$PROJECT_ROOT" node --version)
+PNPM_V=$(hook_mise_exec "$PROJECT_ROOT" pnpm --version)
+VALE_V=$(hook_mise_exec "$PROJECT_ROOT" vale --version)
+VALE_V=${VALE_V%%$'\n'*}
+echo "Environment ready: node $NODE_V, pnpm $PNPM_V, $VALE_V. Dependencies installed."

.agents/hooks/stop.sh

@@ -24,12 +24,7 @@ if [[ -z "$CHANGED" ]]; then
   exit 0
 fi
 
-setup_hook_node_env "$PROJECT_ROOT"
-
-if ! command -v pnpm >/dev/null 2>&1; then
-  echo "pnpm not found after loading the project Node environment." >&2
-  exit 2
-fi
+setup_hook_node_env "$PROJECT_ROOT" || exit 2
 
 PROJECTS=(code cli core forms lint markdown media monaco)
 FAILED=()
@@ -41,11 +36,11 @@ for proj in "${PROJECTS[@]}"; do
 
   TASKS=(build test)
   for task in "${TASKS[@]}"; do
-    if ! node -e "process.exit(JSON.parse(require('fs').readFileSync('projects/$proj/package.json','utf8')).scripts?.['$task'] ? 0 : 1)" 2>/dev/null; then
+    if ! hook_mise_exec "$PROJECT_ROOT" node -e "process.exit(JSON.parse(require('fs').readFileSync('projects/$proj/package.json','utf8')).scripts?.['$task'] ? 0 : 1)" 2>/dev/null; then
       continue
     fi
 
-    OUTPUT=$(cd "projects/$proj" && pnpm run "$task" 2>&1) || {
+    OUTPUT=$(hook_mise_exec "$PROJECT_ROOT/projects/$proj" pnpm run "$task" 2>&1) || {
       echo "$OUTPUT" >&2
       FAILED+=("projects/$proj:$task")
     }

.github/actions/setup-ci/action.yml

@@ -1,57 +1,59 @@
 name: Setup CI dependencies
 description: Install workspace dependencies and Playwright browsers for CI jobs.
 
+inputs:
+  install-playwright:
+    description: Install Playwright browser and system dependencies.
+    default: 'true'
+
 runs:
   using: composite
   steps:
-    - uses: pnpm/action-setup@8912a9102ac27614460f54aedde9e1e7f9aec20d
-      with:
-        version: 11.0.8
-        run_install: false
-    - uses: actions/setup-node@v6
+    - uses: jdx/mise-action@e6a8b3978addb5a52f2b4cd9d91eafa7f0ab959d
       with:
-        node-version-file: './.nvmrc'
-        registry-url: 'https://registry.npmjs.org'
-        cache: 'pnpm'
-    - uses: actions/setup-go@v6
+        version: 2026.6.14
+        install: true
+        cache: true
+    - name: Resolve pnpm store path
+      id: pnpm-store
+      shell: bash
+      run: echo "path=$(pnpm store path --silent)" >> "$GITHUB_OUTPUT"
+    - name: Cache pnpm store
+      uses: actions/cache@v5
       with:
-        go-version: '1.26.x'
-        cache: false
+        path: ${{ steps.pnpm-store.outputs.path }}
+        key: ${{ runner.os }}-${{ runner.arch }}-pnpm-store-${{ hashFiles('pnpm-lock.yaml') }}-v1
+        restore-keys: ${{ runner.os }}-${{ runner.arch }}-pnpm-store-
     - name: Install dependencies
       shell: bash
       run: pnpm install --frozen-lockfile
-    - name: Cache Vale
+    - name: Cache Vale styles
       uses: actions/cache@v5
       with:
         path: |
-          config/vale/bin
           config/vale/styles/Google
           config/vale/styles/write-good
-        key: ${{ runner.os }}-${{ runner.arch }}-vale-${{ hashFiles('.vale.ini', 'config/vale/install.mjs') }}-v1
-    - name: Install Vale
+        key: ${{ runner.os }}-${{ runner.arch }}-vale-styles-${{ hashFiles('.vale.ini') }}-v1
+    - name: Sync Vale styles
       shell: bash
-      run: node config/vale/install.mjs
+      run: vale sync
     - name: Resolve Playwright version
+      if: inputs.install-playwright == 'true'
       id: playwright-version
       shell: bash
       run: echo "version=$(node -p 'require("./node_modules/playwright/package.json").version')" >> "$GITHUB_OUTPUT"
     - name: Cache Playwright browsers
+      if: inputs.install-playwright == 'true'
       id: cache-playwright
       uses: actions/cache@v5
       with:
         path: ~/.cache/ms-playwright
         key: ${{ runner.os }}-${{ runner.arch }}-playwright-chromium-shell-${{ steps.playwright-version.outputs.version }}-v1
-    - uses: actions/setup-node@v6
-      with:
-        node-version: 24
     - name: Install Playwright system dependencies
+      if: inputs.install-playwright == 'true'
       shell: bash
       run: node ./node_modules/playwright/cli.js install-deps chromium
     - name: Install Playwright Chromium
-      if: steps.cache-playwright.outputs.cache-hit != 'true'
+      if: inputs.install-playwright == 'true' && steps.cache-playwright.outputs.cache-hit != 'true'
       shell: bash
       run: node ./node_modules/playwright/cli.js install --only-shell chromium
-    - uses: actions/setup-node@v6
-      with:
-        node-version-file: './.nvmrc'
-        registry-url: 'https://registry.npmjs.org'

.github/workflows/ci.yml

@@ -104,16 +104,9 @@ jobs:
           # semantic-release pushes with — otherwise the default GITHUB_TOKEN's
           # http.extraheader overrides @semantic-release/git's push auth.
           token: ${{secrets.RELEASE_TOKEN}}
-      - uses: pnpm/action-setup@8912a9102ac27614460f54aedde9e1e7f9aec20d
-        with:
-          version: 11.0.8
-          run_install: false
-      - uses: actions/setup-node@v6
+      - uses: ./.github/actions/setup-ci
         with:
-          node-version-file: './.nvmrc'
-          registry-url: 'https://registry.npmjs.org'
-          cache: 'pnpm'
-      - run: pnpm install --frozen-lockfile
+          install-playwright: 'false'
       - name: Download build artifacts
         uses: actions/download-artifact@v8
         with:

.gitignore

@@ -9,8 +9,8 @@
 node_modules
 dist
 .lighthouse
-.visual/dist
-.visual/.tmp-*
+**/.visual/dist
+**/.visual/.tmp-*
 *.diff.png
 coverage
 vendor/

.husky/commit-msg

@@ -1,3 +1,5 @@
 [ -n "$CI" ] && exit 0
 
-pnpm exec commitlint --edit "$1"
+HOOK_DIR=$(cd "$(dirname "$0")" && pwd)
+. "$HOOK_DIR/mise.sh"
+run_mise pnpm exec commitlint --edit "$1"