@a3s-lab/office 0.9.1 → 0.10.0

package/COLLABORATION_ROADMAP.md

@@ -110,15 +110,17 @@ Redis/NATS fan-out plus a distributed writer/lock policy.
 
 Status: browser collaboration foundation, participant roster, remote
 selection/caret projection, participant navigation, durable review-only
-comment and suggestion modes, immutable suggestion-decision audit, and native
-text/options/bounded structural paragraph/comment/suggestion mutations
-implemented; rich native mutation parity remains pending.
+comment and suggestion modes, character-formatting revisions, immutable
+decision audit, and native text/options/bounded structural
+paragraph/comment/suggestion mutations implemented; rich native mutation
+parity remains pending.
 
 - TipTap is bound to `document.content` through
   `@tiptap/extension-collaboration`; StarterKit undo/redo is disabled and the
   collaboration binding owns local history.
-- Section/page OOXML state, comment anchors, and tracked-change marks converge
-  in the ProseMirror fragment. Document-level page color, tracking mode,
+- Section/page OOXML state, comment anchors, and text or character-formatting
+  tracked-change marks converge in the ProseMirror fragment. Document-level
+  page color, tracking mode,
   comment threads/replies, and bibliography sources use conflict-local typed
   roots instead of a serialized document blob.
 - React, Vue, and Web Component adapters accept the same initialized session.
@@ -166,6 +168,12 @@ implemented; rich native mutation parity remains pending.
   converge, a second conflicting final decision fails closed, old Documents
   without the additive roots remain readable, and a final decision clears
   local history that could otherwise resurrect the decided mark.
+- Character-formatting commands over existing text create one `formatting`
+  change mark with a bounded prior-direct-mark snapshot. Accept removes only
+  the revision wrapper and keeps the new formatting; reject restores the prior
+  bold, italic, underline, strike, sub/superscript, font, size, color,
+  highlight, and grid marks without changing text. Supported DOCX
+  `w:rPrChange` records import into the same model and export natively.
 - Rust, CLI, MCP, and A3S Code expose `document-comment-create`,
   `document-comment-reply`, `document-comment-set-resolved`,
   `document-comment-delete`, `document-suggestion-create`, and
@@ -183,6 +191,12 @@ implemented; rich native mutation parity remains pending.
   content, structure, options, non-suggestion formatting, authorship, order,
   claims, anchors, foreign deletion, or foreign suggestion changes fail before
   the durable store changes.
+- Native Yrs validation admits only the bounded formatting-change schema,
+  preserves it across restart and duplicate/reordered delivery, exposes
+  `formatting` in immutable decision projections, and makes `suggest` updates
+  retain existing formatting revisions byte-semantically. Formatting is a
+  Document change kind, not a native insertion/deletion suggestion kind; the
+  current closed `document-suggestion-*` mutations remain text-only.
 
 Remaining:
 
@@ -395,8 +409,9 @@ projection, a host-injected live CLI transport session, authenticated browser
 suggestion-update authorization, and typed Markdown, Document
 content/comment/suggestion, Spreadsheet cell, Presentation scene-element, PDF
 annotation/form-value, and PDF redaction/page-operation review mutation surfaces
-are implemented; the remaining format mutations and native presence projection
-are pending.
+are implemented. The live CLI session also projects ephemeral native Presence
+and format-specific locations through standard Yjs Awareness; remaining typed
+format mutations are pending.
 
 - Yrs `0.27.3` now uses 53-bit Yjs-compatible client IDs and exchanges standard
   Yjs v1 updates, state vectors, and y-sync `SyncStep1`/`Update` messages with
@@ -426,6 +441,14 @@ are pending.
   stdin/stdout for a coding-agent or product host. The host still owns the
   WebSocket or IPC channel, room selection, authentication, authorization,
   buffering, and delivery identities; the CLI never opens a provider itself.
+- Supplying `--actor-name` gives the live session a separate in-memory Yrs
+  Awareness peer. Typed active/idle/away state and Document, Markdown,
+  Spreadsheet, Presentation, or PDF locations are emitted as bounded
+  `outbound-awareness` records, while validated remote updates and peer-left
+  events become sorted participant snapshots. Reconnect clears stale remote
+  state and republishes the local participant; orderly close emits an
+  Awareness tombstone. No Presence state or clock enters the replica,
+  checkpoint, durable update log, or operation receipts.
 - Each replica binds one stable actor ID, actor kind, permission mode, artifact
   identity/kind, namespace, and client ID. Apply/checkpoint/leave require the
   same identity plus a stable operation ID and accept an optional state-vector
@@ -518,8 +541,6 @@ Remaining:
   structural/rich-text operations plus PDF signatures; deepen Document
   mutations to additional nested structures and complete table/list/section
   revision workflows.
-- Project editor-visible presence and selection state while keeping Awareness
-  ephemeral and outside native replica persistence.
 
 Exit criterion: a browser, `office` CLI, MCP client, and `a3s code` agent edit
 the same artifact concurrently, converge at the shared-model level, reconnect

package/README.md

@@ -47,8 +47,10 @@ workflows, and a separate Rust automation plane.
 - **Collaborate across every editor** with shared Yjs/Yrs content, Awareness
   participants and remote locations, plus browser, CLI, MCP, and A3S Code peers.
   Document reviewers can submit attributed insertions, deletions, and
-  replacements without directly changing canonical text; editors accept or
-  reject each proposal with an immutable shared decision record.
+  replacements without directly changing canonical text. Editors can also
+  track character-formatting revisions, accept the new formatting or restore
+  the exact prior marks, and retain either result in the immutable shared
+  decision audit.
 - **Automate deterministically** through the native CLI, standard MCP server,
   or packaged Office Skill.
 
@@ -148,7 +150,8 @@ The images below are committed visual-regression baselines from the real
   Presentation scene-element and z-order, and PDF annotation, form-value, and
   review changes, including attributable Document selection comments, replies,
   text suggestions, and atomic final decisions, retain browser/native actor
-  attribution, and checkpoint without replacing a whole Office file.
+  attribution, validate browser-created formatting revisions and their audit
+  records, and checkpoint without replacing a whole Office file.
 
 ## Real-time collaboration
 
@@ -171,9 +174,13 @@ deletions, and replacements while canonical text, structure, formatting,
 options, comments, and other actors' suggestions remain protected. An `edit`
 participant accepts or rejects a proposal and appends the final actor-attributed
 decision to the immutable `document.change-decisions` audit trail. The A3S Boot
-service validates both comment and suggestion semantics under the durable room
-lock before it persists or broadcasts caller-supplied Yjs bytes. `suggest` on
-non-Document formats remains receive-only.
+service also persists `edit`-mode character-formatting revisions and validates
+their bounded prior-format snapshot before broadcast. Accept keeps the new
+bold, italic, underline, strike, vertical position, font, size, color, or
+highlight; reject restores the prior direct marks without deleting the text.
+Authenticated `suggest` updates must preserve those formatting revisions and
+cannot rewrite their identity or snapshot. `suggest` on non-Document formats
+remains receive-only.
 See the bilingual [real-time collaboration guide](https://a3s-lab.github.io/Office/docs/components/collaboration.html)
 for React, Vue, Web Component, reconnect, security, and native-agent setup.
 The repository also ships a runnable
@@ -196,6 +203,8 @@ bun run playground
 
 Then open the local URL printed by the development server. For a zero-install
 tour, use the [live Playground](https://a3s-lab.github.io/Office/).
+Choose **体验格式修订**, open **审阅**, then **查看修订（1）** to inspect the
+Formatting card and exercise accept or reject semantics.
 
 ### Embed a controlled React editor
 
@@ -1042,7 +1051,7 @@ cargo run -p a3s-office-cli -- collab diff .a3s/report.replica \
 
 # Bridge that replica to a host-owned room over machine-readable JSONL.
 cargo run -p a3s-office-cli -- collab session .a3s/report.replica \
-  --poll-ms 100 --json
+  --poll-ms 100 --actor-name "A3S Agent" --json
 
 # Make a typed local change in an initialized Markdown replica. A running
 # session publishes the resulting incremental Yjs update automatically.
@@ -1180,7 +1189,11 @@ controller as a shared participant roster, remote canvas projection, and
 participant-to-location navigation; neither component creates an account or
 backend. The native CLI's JSONL session bridges the same host-channel envelope,
 including reconnect handshakes, durable agent updates, and remote-echo
-suppression, without opening its own network provider. Native Rust `project`,
+suppression, without opening its own network provider. With `--actor-name`, it
+also emits standard, bounded `outbound-awareness` records for ephemeral agent
+activity and format-specific locations, accepts remote Awareness and peer-left
+records, and publishes participant snapshots without changing the durable
+replica. Native Rust `project`,
 `collab read`, and `office_collaboration_read` return the exact canonical
 Markdown source or an Office-owned bounded Document projection with stable
 paragraph/text identities, structural ancestry, option fields, subordinate
@@ -1323,6 +1336,8 @@ without hard-coded return URLs.
 
 - [Live Playground](https://a3s-lab.github.io/Office/)
 - [Documentation center](https://a3s-lab.github.io/Office/docs/)
+- [A3S Office 0.10.0 documentation](https://a3s-lab.github.io/Office/docs/0.10.0/)
+- [A3S Office 0.9.2 documentation](https://a3s-lab.github.io/Office/docs/0.9.2/)
 - [A3S Office 0.9.1 documentation](https://a3s-lab.github.io/Office/docs/0.9.1/)
 - [A3S Office 0.9.0 documentation](https://a3s-lab.github.io/Office/docs/0.9.0/)
 - [A3S Office 0.8.1 documentation](https://a3s-lab.github.io/Office/docs/0.8.1/)