@beyondwork/docx-react-component 1.0.0 → 1.0.2

package/docs/plans/waves/reviews/wave-7-cont-qa.md

@@ -1,82 +0,0 @@
-# Wave 7 cont-QA Report
-
-## 2026-03-26T17:31:24Z Final Closure Pass
-
-Wave 7 now closes on the current worktree.
-
-Evidence reviewed:
-
-- `docs/reference/repository-guidance.md`
-- `docs/research/agent-context-sources.md`
-- `docs/reference/wave-planning-lessons.md`
-- `docs/plans/current-state.md`
-- `docs/plans/master-plan.md`
-- `docs/roadmap.md`
-- `docs/plans/component-cutover-matrix.md`
-- `docs/plans/component-cutover-matrix.json`
-- `docs/plans/migration.md`
-- `docs/plans/waves/wave-7.md`
-- `docs/plans/waves/wave-8.md`
-- `docs/plans/waves/reviews/wave-7-preservation-proof.md`
-- `docs/plans/waves/reviews/wave-7-ooxml-compliance.md`
-- `docs/plans/waves/reviews/wave-7-trust-ux.md`
-- `.tmp/wave-7-preservation/preservation-manifest.json`
-- `.tmp/wave-7-preservation/reattachment-report.json`
-- `.tmp/wave-7-preservation/package-fidelity-report.json`
-- `.tmp/wave-7-preservation/review-boundary-report.json`
-- `.tmp/wave-7-preservation/malformed-doc-report.json`
-- `.tmp/wave-7-preservation/trust-ux-checklist.md`
-- `.tmp/wave-7-preservation/locked-region-ui-smoke.json`
-- `.tmp/main-wave-launcher/integration/wave-7.md`
-- `.tmp/main-wave-launcher/integration/wave-7.json`
-- `.tmp/main-wave-launcher/results/wave-7/attempt-2/A8.json`
-- `.tmp/main-wave-launcher/results/wave-7/attempt-2/A9.json`
-- `.tmp/main-wave-launcher/results/wave-7/attempt-2/A0.json`
-- `src/io/docx-session.ts`
-- `src/ui/editor-surface/editor-surface.tsx`
-- `src/ui/compatibility/compatibility-panel.tsx`
-- `src/ui/status/status-bar.tsx` (test-only standalone variant)
-- `test/io/preserved-package-roundtrip.test.ts`
-- `test/io/docx-session.test.ts`
-- `test/io/revision-roundtrip.test.ts`
-- `test/io/comment-roundtrip.test.ts`
-- `test/preservation/opaque-fragment-store.test.ts`
-- `test/ui/opaque-region.test.tsx`
-- `test/ui/core-text-editor.test.tsx`
-- `test/ui/word-review-editor.interaction.test.tsx`
-- `test/validation/malformed-doc.test.ts`
-- `pnpm exec wave control status --lane main --wave 7 --json`
-
-Validation rerun:
-
-- `pnpm exec tsx --test test/ui/opaque-region.test.tsx test/ui/core-text-editor.test.tsx test/ui/word-review-editor.interaction.test.tsx test/io/docx-session.test.ts test/validation/malformed-doc.test.ts`
-  - result: `25` pass, `0` fail
-- `pnpm exec tsx --test test/io/preserved-package-roundtrip.test.ts test/io/revision-roundtrip.test.ts test/io/comment-roundtrip.test.ts test/preservation/opaque-fragment-store.test.ts`
-  - result: `14` pass, `0` fail
-- `pnpm run lint:no-authored-js`
-  - result: pass
-- `pnpm exec wave doctor --json`
-  - result: `ok: true`
-
-Reconciliation:
-
-- The Wave 7 package-fidelity, review-boundary, and malformed-doc artifacts remain green and support the bounded Wave 7 proof.
-- The mounted trust and diagnostics seam is closed on the shipped path. `src/ui/editor-surface/editor-surface.tsx`, `src/ui/compatibility/compatibility-panel.tsx`, `src/ui/status/status-bar.tsx`, and `src/io/docx-session.ts` now match the runtime-owned compatibility and diagnostics contract on the current worktree.
-- The earlier trust-gap and helper-gap residue is superseded by current code plus the focused reruns above. Wave 7 should now be judged from the mounted shell and the live `loadDocxEditorSession(...)` path, not from the stale attempt-1 isolation notes.
-- The shared-plan docs now match the landed implementation truth: `unsupported-ooxml-preservation` remains `baseline-proved`, `tracked-changes-and-review-actions` advances to `baseline-proved`, and Wave 8 remains the owner of the explicit harness-backed `.docx -> comment -> review/redline -> export -> validate` proof.
-- The remaining control-plane residue is administrative, not architectural. The only remaining work after this report is refreshing the role-owned A8 and A9 closure signals and clearing the stale rerun residue.
-
-Smallest remaining blocker set:
-
-1. None on the current code and documentation truth.
-
-Gate judgment:
-
-- Architecture: pass. The mounted preserve-only trust path and the live diagnostics path satisfy the Wave 7 runtime contract.
-- Integration: pass. The integration summary, result artifact, and Wave 7 review packet agree on the zero-implementation-blocker state.
-- Durability: pass. The Wave 7 proof bundle remains present and green on the current worktree.
-- Live: pass. Wave 7 remains a repo proof wave with no deploy bar.
-- Docs: pass. The shared-plan set and the Wave 7 review packet match the landed code truth.
-
-[wave-gate] architecture=pass integration=pass durability=pass live=pass docs=pass detail=Wave 7 proof, integration, and shared-plan docs now match the shipped code and refreshed artifacts
-Verdict: PASS

package/docs/plans/waves/reviews/wave-7-ooxml-compliance.md

@@ -1,85 +0,0 @@
-# Wave 7 OOXML Preservation Compliance Review
-
-## 2026-03-26T17:31:24Z Closure Pass
-
-Wave 7 now clears the full declared compliance bar on the current worktree.
-
-The earlier package-fidelity gap was already closed, and the later mounted trust and diagnostics gap is now also closed in the shipped editor path. On the current evidence set, both `unsupported-ooxml-preservation` and the bounded Wave 7 claim for `tracked-changes-and-review-actions` meet the declared `baseline-proved` target.
-
-### Evidence reviewed
-
-- [wave-7.md](/home/coder/docx-react-component/docs/plans/waves/wave-7.md)
-- [ooxml-compliance.md](/home/coder/docx-react-component/docs/reference/ooxml-compliance.md)
-- [repository-guidance.md](/home/coder/docx-react-component/docs/reference/repository-guidance.md)
-- [agent-context-sources.md](/home/coder/docx-react-component/docs/research/agent-context-sources.md)
-- [wave-7-preservation-proof.md](/home/coder/docx-react-component/docs/plans/waves/reviews/wave-7-preservation-proof.md)
-- [wave-7-trust-ux.md](/home/coder/docx-react-component/docs/plans/waves/reviews/wave-7-trust-ux.md)
-- [preservation-manifest.json](/home/coder/docx-react-component/.tmp/wave-7-preservation/preservation-manifest.json)
-- [reattachment-report.json](/home/coder/docx-react-component/.tmp/wave-7-preservation/reattachment-report.json)
-- [package-fidelity-report.json](/home/coder/docx-react-component/.tmp/wave-7-preservation/package-fidelity-report.json)
-- [review-boundary-report.json](/home/coder/docx-react-component/.tmp/wave-7-preservation/review-boundary-report.json)
-- [malformed-doc-report.json](/home/coder/docx-react-component/.tmp/wave-7-preservation/malformed-doc-report.json)
-- [trust-ux-checklist.md](/home/coder/docx-react-component/.tmp/wave-7-preservation/trust-ux-checklist.md)
-- [locked-region-ui-smoke.json](/home/coder/docx-react-component/.tmp/wave-7-preservation/locked-region-ui-smoke.json)
-- [package-preservation.ts](/home/coder/docx-react-component/src/preservation/package-preservation.ts)
-- [markup-compatibility.ts](/home/coder/docx-react-component/src/preservation/markup-compatibility.ts)
-- [docx-session.ts](/home/coder/docx-react-component/src/io/docx-session.ts)
-- [serialize-comments.ts](/home/coder/docx-react-component/src/io/export/serialize-comments.ts)
-- [serialize-runtime-revisions.ts](/home/coder/docx-react-component/src/io/export/serialize-runtime-revisions.ts)
-- [compatibility-panel.tsx](/home/coder/docx-react-component/src/ui/compatibility/compatibility-panel.tsx)
-- [status-bar.tsx](/home/coder/docx-react-component/src/ui/status/status-bar.tsx) (test-only standalone variant)
-- [editor-surface.tsx](/home/coder/docx-react-component/src/ui/editor-surface/editor-surface.tsx)
-- [preserved-package-roundtrip.test.ts](/home/coder/docx-react-component/test/io/preserved-package-roundtrip.test.ts)
-- [package-preservation.test.ts](/home/coder/docx-react-component/test/preservation/package-preservation.test.ts)
-- [docx-session.test.ts](/home/coder/docx-react-component/test/io/docx-session.test.ts)
-- [opaque-region.test.tsx](/home/coder/docx-react-component/test/ui/opaque-region.test.tsx)
-- [word-review-editor.interaction.test.tsx](/home/coder/docx-react-component/test/ui/word-review-editor.interaction.test.tsx)
-- [malformed-doc.test.ts](/home/coder/docx-react-component/test/validation/malformed-doc.test.ts)
-
-### Compliance judgment
-
-- unknown package parts and relationships: pass
-- `AlternateContent` and `mc:Ignorable`: pass
-- note parts, field markup, SDTs, and custom XML wrappers: pass
-- preserve-only review markup at export boundaries: pass for the bounded Wave 7 claim
-- malformed packages: pass as fail-closed read-only diagnostics with export blocked
-- preserve-only trust and diagnostics UX in the mounted editor: pass
-
-### Reconciliation
-
-- The earlier trust blocker is now superseded. [wave-7-trust-ux.md](/home/coder/docx-react-component/docs/plans/waves/reviews/wave-7-trust-ux.md) and the focused mounted-shell rerun now show the preserve-only trust path integrated in the shipped shell.
-- [package-fidelity-report.json](/home/coder/docx-react-component/.tmp/wave-7-preservation/package-fidelity-report.json) still shows `missingPreservedParts = []`, `contentTypeMismatches = []`, and stable preserved relationships across `F15` through `F20`.
-- [malformed-doc-report.json](/home/coder/docx-react-component/.tmp/wave-7-preservation/malformed-doc-report.json) still proves `F21` remains fail-closed with `readOnly: true`, `fatalErrorCode: package_corrupt`, `blockExport: true`, and `exportRejected: true`.
-- [review-boundary-report.json](/home/coder/docx-react-component/.tmp/wave-7-preservation/review-boundary-report.json) still proves the bounded tracked-change claim: supported imported redline export remains non-destructive, while preserve-only imported review markup stays explicit and retained.
-- [compatibility-panel.tsx](/home/coder/docx-react-component/src/ui/compatibility/compatibility-panel.tsx), [status-bar.tsx](/home/coder/docx-react-component/src/ui/status/status-bar.tsx), and [editor-surface.tsx](/home/coder/docx-react-component/src/ui/editor-surface/editor-surface.tsx) now align the mounted shell with that runtime-owned compatibility story.
-
-### Validation rerun
-
-```bash
-pnpm exec tsx --test \
-  test/io/preserved-package-roundtrip.test.ts \
-  test/io/docx-session.test.ts \
-  test/preservation/package-preservation.test.ts \
-  test/ui/opaque-region.test.tsx \
-  test/ui/word-review-editor.interaction.test.tsx \
-  test/validation/malformed-doc.test.ts
-```
-
-Result: `22` pass, `0` fail.
-
-### Conclusion
-
-Current A5 judgment: pass for the declared Wave 7 scope.
-
-- `unsupported-ooxml-preservation` now has both the durable package-fidelity proof and the mounted trust or diagnostics proof needed for the Wave 7 `baseline-proved` claim.
-- `tracked-changes-and-review-actions` has the OOXML and export-boundary evidence needed for its bounded Wave 7 `baseline-proved` claim.
-
-Shared-plan implication for A8, A9, and A0:
-
-- treat the old mounted-trust blocker as superseded
-- promote `tracked-changes-and-review-actions` to `baseline-proved`
-- keep the Wave 7 claim bounded to preserve-only package fidelity plus supported imported-redline export safety, not Word certification
-
-## Historical Note
-
-The earlier `2026-03-26T16:18:00Z` blocked pass was accurate for the pre-rerun worktree, but it is superseded by the mounted-shell integration now present in source and by the refreshed trust artifacts.

package/docs/plans/waves/reviews/wave-7-preservation-proof.md

@@ -1,119 +0,0 @@
-# Wave 7 Preservation Proof
-
-Generated on `2026-03-26` for Wave 7 / A4.
-
-## Scope
-
-This proof bundle closes the A4-owned preservation baseline for:
-
-- `unsupported-ooxml-preservation` package and fixture proof across `F15` through `F21`
-- `tracked-changes-and-review-actions` at the preserve-only boundary, including supported imported-redline export and preserve-only imported review markup survival
-
-Durable artifacts:
-
-- `.tmp/wave-7-preservation/preservation-manifest.json`
-- `.tmp/wave-7-preservation/reattachment-report.json`
-- `.tmp/wave-7-preservation/package-fidelity-report.json`
-- `.tmp/wave-7-preservation/review-boundary-report.json`
-- `.tmp/wave-7-preservation/malformed-doc-report.json`
-
-Generated fixtures:
-
-- `test/fixtures/docx/F15-sections-headers-footers.docx`
-- `test/fixtures/docx/F16-footnotes-endnotes.docx`
-- `test/fixtures/docx/F17-fields-and-toc.docx`
-- `test/fixtures/docx/F18-content-controls-template.docx`
-- `test/fixtures/docx/F19-custom-xml-doc-assembly.docx`
-- `test/fixtures/docx/F20-unknown-ooxml-and-alternatecontent.docx`
-- `test/fixtures/docx/F21-malformed-broken-docx.docx`
-
-Roundtrip exports captured for inspection:
-
-- `.tmp/wave-7-preservation/exports/F15.roundtrip.docx`
-- `.tmp/wave-7-preservation/exports/F16.roundtrip.docx`
-- `.tmp/wave-7-preservation/exports/F17.roundtrip.docx`
-- `.tmp/wave-7-preservation/exports/F18.roundtrip.docx`
-- `.tmp/wave-7-preservation/exports/F19.roundtrip.docx`
-- `.tmp/wave-7-preservation/exports/F20.roundtrip.docx`
-- `.tmp/wave-7-preservation/exports/S02-freeform-edit.docx`
-- `.tmp/wave-7-preservation/exports/preserve-only-revision-export.docx`
-- `.tmp/wave-7-preservation/exports/preserve-only-comment-export.docx`
-
-## Validation Rerun
-
-Bundle regeneration on the current worktree:
-
-```bash
-pnpm exec tsx .tmp/wave-7-preservation/generate-wave-7-proof.ts
-```
-
-Result: regenerated `F15` through `F21`, refreshed all five required reports, and rewrote the roundtrip exports under `.tmp/wave-7-preservation/exports/`.
-
-Focused rerun on the regenerated bundle:
-
-```bash
-pnpm exec tsx --test \
-  test/io/preserved-package-roundtrip.test.ts \
-  test/io/docx-session.test.ts \
-  test/io/revision-roundtrip.test.ts \
-  test/io/comment-roundtrip.test.ts \
-  test/preservation/opaque-fragment-store.test.ts \
-  test/ui/opaque-region.test.tsx \
-  test/validation/malformed-doc.test.ts
-```
-
-Result: `30` pass, `0` fail.
-
-Lint check:
-
-```bash
-pnpm run lint:no-authored-js
-```
-
-Result: pass.
-
-## Fixture Proof
-
-`preservation-manifest.json`, `reattachment-report.json`, and `package-fidelity-report.json` prove the fixture set below on the package-backed runtime/export path:
-
-| Fixture | Import state | Export state | Durable proof |
-| --- | --- | --- | --- |
-| `F15` | `w:sectPr` imports as a locked preserve-only fragment; `/word/header1.xml` and `/word/footer1.xml` register as preserved package parts | runtime text insert changes source bytes while preserving `rIdHeader1`, `rIdFooter1`, header bytes, footer bytes, and the terminal `w:sectPr` subtree | `preservation-manifest.json`, `reattachment-report.json` |
-| `F16` | `w:footnoteReference` and `w:endnoteReference` import as locked preserve-only inline markers; `/word/footnotes.xml` and `/word/endnotes.xml` remain preserved package parts | runtime text insert preserves note references, note-part bytes, and the `rIdFootnotes` / `rIdEndnotes` relationship targets | `preservation-manifest.json`, `reattachment-report.json` |
-| `F17` | TOC and PAGE field code runs import as preserve-only field fragments | runtime text insert keeps `w:fldChar`, `w:instrText`, and `w:fldSimple` markup intact | `preservation-manifest.json`, `reattachment-report.json` |
-| `F18` | block-level `w:sdt` imports as a locked preserve-only content-control fragment | runtime text insert keeps the original `w:sdt` subtree intact | `preservation-manifest.json`, `reattachment-report.json` |
-| `F19` | `w:customXml` wrapper imports as a locked preserve-only fragment; `/customXml/item1.xml` and `/customXml/itemProps1.xml` register as preserved package parts | runtime text insert keeps the wrapper intact and preserves both custom XML parts plus `rIdItemProps1` on `itemProps1.xml` | `preservation-manifest.json`, `reattachment-report.json` |
-| `F20` | `mc:AlternateContent`, future-namespaced OOXML, and `w:altChunk` import as locked preserve-only fragments; `/word/unknown/future.xml` and `/word/afchunk1.html` register as preserved package parts | runtime text insert preserves `mc:Ignorable`, `xmlns:cx`, `mc:AlternateContent`, `rIdUnknown1`, `rIdAltChunk1`, and both preserved package parts | `preservation-manifest.json`, `reattachment-report.json`, `package-fidelity-report.json` |
-| `F21` | unresolved internal relationship graph fails closed into `readOnly: true` with `fatalError.code = package_corrupt` and `blockExport = true` | export rejects instead of stripping or rewriting the broken relationship | `preservation-manifest.json`, `malformed-doc-report.json` |
-
-Package fidelity results:
-
-- `package-fidelity-report.json` shows `missingPreservedParts = []` and `contentTypeMismatches = []` for every `F15` through `F20` roundtrip export.
-- `F20` also proves root markup-compatibility preservation with `mcIgnorablePreserved = true`, `alternateContentPreserved = true`, and `customNamespacesPreserved = true`.
-- `F21` is intentionally not exported; the proof is fail-closed import plus export rejection.
-
-## Review Boundary Proof
-
-`review-boundary-report.json` closes the tracked-change baseline at the preserve-only boundary with three durable cases:
-
-- Supported imported redline case: scenario `S02` exports after a runtime text insert without flattening imported review markup. The exported document still contains `w:ins` and `w:del`, reopens as `readOnly: false`, and reloads with `227` revision records.
-- Preserve-only revision case: an imported insertion containing nested bookmarks stays preserve-only after a runtime text insert. The export still contains `<w:ins w:id="55">`, `bookmarkStart`, and `bookmarkEnd`, and the imported revision carries a preserve-only reason instead of being silently rewritten.
-- Preserve-only comment case: an imported comment anchor overlapping preserve-only review markup stays detached on import and exports without stripping `commentRangeStart`, `commentRangeEnd`, `commentReference`, or the preserved bookmark markup inside `comments.xml`.
-
-This is the bounded Wave 7 claim for `tracked-changes-and-review-actions`: supported imported redline export remains non-destructive, while preserve-only imported review structures stay explicit and preserved instead of being flattened into the editable slice.
-
-## User-Visible Lock And Warning Behavior
-
-Current mounted and isolated trust behavior is now recorded explicitly:
-
-- `preservation-manifest.json` captures the locked-region affordances exposed by the preservation layer for each opaque fragment: `trustReady`, `deletionLabel`, and `deletionDetail`. The generated trust copy states that the region stays visible, locked, and exportable unless an unsupported-fatal issue exists elsewhere.
-- `test/ui/opaque-region.test.tsx` passed in the focused rerun, so the isolated `OpaqueRegionView` and `LockedRegionPanel` surfaces currently have green proof for whole-unit selection, explicit delete affordances, and the distinction between preserve-only regions and other export blockers.
-- `test/ui/word-review-editor.interaction.test.tsx` now proves those trust surfaces are also mounted in the shipped shell. The live editor renders the locked-region explanation, surfaces `Export blockers`, and keeps the status bar on `Compatibility 1 export blocker` instead of `Compatibility Clear` when export is blocked.
-- `.tmp/wave-7-preservation/trust-ux-checklist.md` and `.tmp/wave-7-preservation/locked-region-ui-smoke.json` now record the mounted-shell truth instead of the earlier pre-rerun gap state.
-
-That means the preservation proof is now durable, explicit, and aligned with the current user-facing trust integration. This remains a package-backed Wave 7 proof, not a Word-certification claim.
-
-## Limits
-
-- Word desktop and Word on the web were not executed locally in this environment. The Wave 7 proof remains a durable package-backed integration proof, not live Word certification.
-- `F21` remains `unsupported-fatal` by contract. A successful export for that fixture would be a regression, not a milestone.

package/docs/plans/waves/reviews/wave-7-trust-ux.md

@@ -1,87 +0,0 @@
-# Wave 7 Trust UX Review
-
-Generated on `2026-03-26` for Wave 7 / A6.
-
-Status: `pass`
-
-This review checks whether preserve-only and diagnostics UX answers three questions for legal-review users:
-
-- what happened
-- what is safe
-- what can I do next
-
-## 2026-03-26T17:31:24Z Closure Pass
-
-The Wave 7 trust UX bar is now met on the shipped editor path.
-
-The preserve-only trust surfaces are mounted in the live shell, blocked export now shows the runtime's concrete blocker text, and the status bar no longer reports `Compatibility Clear` while export is blocked. The mounted path is not a generic polish pass anymore; it now reflects the runtime-owned compatibility and diagnostics contract directly.
-
-## Evidence Reviewed
-
-- [editor-surface.tsx](/home/coder/docx-react-component/src/ui/editor-surface/editor-surface.tsx)
-- [locked-region-panel.tsx](/home/coder/docx-react-component/src/ui/compatibility/locked-region-panel.tsx)
-- [opaque-region-view.tsx](/home/coder/docx-react-component/src/ui/editor-surface/opaque-region-view.tsx)
-- [compatibility-panel.tsx](/home/coder/docx-react-component/src/ui/compatibility/compatibility-panel.tsx)
-- [status-bar.tsx](/home/coder/docx-react-component/src/ui/status/status-bar.tsx) (test-only standalone variant)
-- [read-only-diagnostics-runtime.ts](/home/coder/docx-react-component/src/runtime/read-only-diagnostics-runtime.ts)
-- [docx-session.ts](/home/coder/docx-react-component/src/io/docx-session.ts)
-- [word-review-editor.interaction.test.tsx](/home/coder/docx-react-component/test/ui/word-review-editor.interaction.test.tsx)
-- [opaque-region.test.tsx](/home/coder/docx-react-component/test/ui/opaque-region.test.tsx)
-- [malformed-doc.test.ts](/home/coder/docx-react-component/test/validation/malformed-doc.test.ts)
-- [.tmp/wave-7-preservation/trust-ux-checklist.md](/home/coder/docx-react-component/.tmp/wave-7-preservation/trust-ux-checklist.md)
-- [.tmp/wave-7-preservation/locked-region-ui-smoke.json](/home/coder/docx-react-component/.tmp/wave-7-preservation/locked-region-ui-smoke.json)
-
-## Findings
-
-1. Preserve-only trust surfaces are mounted in the shipped editor path.
-
-- [editor-surface.tsx](/home/coder/docx-react-component/src/ui/editor-surface/editor-surface.tsx) now renders [opaque-region-view.tsx](/home/coder/docx-react-component/src/ui/editor-surface/opaque-region-view.tsx) and [locked-region-panel.tsx](/home/coder/docx-react-component/src/ui/compatibility/locked-region-panel.tsx) for selected `opaque_block` ranges.
-- [word-review-editor.interaction.test.tsx](/home/coder/docx-react-component/test/ui/word-review-editor.interaction.test.tsx) proves the live shell mounts the trust copy after selecting `Section properties`.
-- Result: legal-review users now see the preserve-only explanation in the actual editor shell, not only in isolated component proof.
-
-2. Blocked export now shows the runtime's concrete reason.
-
-- [compatibility-panel.tsx](/home/coder/docx-react-component/src/ui/compatibility/compatibility-panel.tsx) renders an `Export blockers` list from `snapshot.compatibility.blockExportReasons`.
-- [word-review-editor.interaction.test.tsx](/home/coder/docx-react-component/test/ui/word-review-editor.interaction.test.tsx) asserts the mounted shell shows `Export blockers` and the concrete blocker text `Password-protected package content still needs host-side decryption`.
-- Result: blocked export now explains the same state the runtime already knows.
-
-3. Diagnostics mode now avoids the earlier mounted-shell contradiction.
-
-- [status-bar.tsx](/home/coder/docx-react-component/src/ui/status/status-bar.tsx) (test-only standalone variant) reports blocker counts when export is blocked; the equivalent in production is the status strip in `PrototypeReviewWorkspace`.
-- [malformed-doc.test.ts](/home/coder/docx-react-component/test/validation/malformed-doc.test.ts) proves the read-only diagnostics runtime stays fail-closed and publishes a single concrete export blocker.
-- [word-review-editor.interaction.test.tsx](/home/coder/docx-react-component/test/ui/word-review-editor.interaction.test.tsx) asserts the mounted shell no longer shows `Compatibility Clear` when export is blocked and instead shows `Compatibility 1 export blocker`.
-- Result: the mounted UI now gives a coherent "inspectable but not exportable" posture for broken imports.
-
-## Validation Rerun
-
-Focused rerun on the current worktree:
-
-```bash
-pnpm exec tsx --test \
-  test/ui/opaque-region.test.tsx \
-  test/ui/core-text-editor.test.tsx \
-  test/ui/word-review-editor.interaction.test.tsx \
-  test/io/docx-session.test.ts \
-  test/validation/malformed-doc.test.ts
-```
-
-Result: `25` pass, `0` fail.
-
-## Closure Recommendation
-
-Treat the Wave 7 trust UX gate as closed.
-
-- preserve-only trust messaging is mounted in the shipped shell
-- blocked export shows concrete runtime-owned blocker text
-- diagnostics mode remains read-only and export-blocking on the live path
-- the mounted status surfaces now agree with the runtime-owned compatibility state
-
-## Historical Note
-
-Earlier A6-generated gap artifacts from `2026-03-26T16:17:37Z` were accurate for the pre-rerun worktree, but they are superseded by the mounted-shell proof now in source and by the current focused rerun above.
-
-## Evidence
-
-- Durable review note: `docs/plans/waves/reviews/wave-7-trust-ux.md`
-- Machine-visible checklist: `.tmp/wave-7-preservation/trust-ux-checklist.md`
-- Machine-visible smoke artifact: `.tmp/wave-7-preservation/locked-region-ui-smoke.json`

package/docs/plans/waves/reviews/wave-8-accessibility-and-design.md

@@ -1,128 +0,0 @@
-# Wave 8 Accessibility And Design Review
-
-Generated on `2026-03-26` for Wave 8 / A4. Refreshed against the current source,
-validation reruns completed at `21:14 UTC`, and the board projection generated at
-`21:13 UTC`.
-
-Status: `pass with Wave 9 token-consolidation follow-up`
-
-This review checks the bounded Wave 8 accessibility, motion, and token baseline for the
-embedded editor shell as mounted in the internal Railway harness, with the `/demo`
-prototype reviewed as the future-shell reference only. It does not widen support
-claims for tables, browser-font fidelity, or any other deferred legal-fidelity slice.
-The latest live-proof and shared-plan docs are current. The `21:13 UTC` board
-projection no longer carries an A4 proof gap, and this note keeps the bounded
-Wave 8 accessibility, reduced-motion, and operator-shell token baseline durable
-without widening the active v1 component contract.
-
-## Evidence Reviewed
-
-- [docs/plans/waves/deferred/legal-feedback-wave-expansion.md](/home/coder/docx-react-component/docs/plans/waves/deferred/legal-feedback-wave-expansion.md)
-- [services/react-word-editor/app/layout.tsx](/home/coder/docx-react-component/services/react-word-editor/app/layout.tsx)
-- [services/react-word-editor/app/globals.css](/home/coder/docx-react-component/services/react-word-editor/app/globals.css)
-- [services/react-word-editor/app/page.tsx](/home/coder/docx-react-component/services/react-word-editor/app/page.tsx)
-- [services/react-word-editor/app/demo/prototype-client.tsx](/home/coder/docx-react-component/services/react-word-editor/app/demo/prototype-client.tsx)
-- [services/react-word-editor/app/demo/page.tsx](/home/coder/docx-react-component/services/react-word-editor/app/demo/page.tsx)
-- [services/react-word-editor/app/editor/[sessionId]/page.tsx](/home/coder/docx-react-component/services/react-word-editor/app/editor/[sessionId]/page.tsx)
-- [services/react-word-editor/app/fixtures/page.tsx](/home/coder/docx-react-component/services/react-word-editor/app/fixtures/page.tsx)
-- [services/react-word-editor/app/runs/[runId]/page.tsx](/home/coder/docx-react-component/services/react-word-editor/app/runs/[runId]/page.tsx)
-- [services/react-word-editor/components/harness-editor-session-client.tsx](/home/coder/docx-react-component/services/react-word-editor/components/harness-editor-session-client.tsx)
-- [services/react-word-editor/lib/demo-fixtures.ts](/home/coder/docx-react-component/services/react-word-editor/lib/demo-fixtures.ts)
-- [src/ui/WordReviewEditor.tsx](/home/coder/docx-react-component/src/ui/WordReviewEditor.tsx)
-- [src/ui/editor-surface/editor-surface.tsx](/home/coder/docx-react-component/src/ui/editor-surface/editor-surface.tsx)
-- [src/ui/toolbar/core-toolbar.tsx](/home/coder/docx-react-component/src/ui/toolbar/core-toolbar.tsx) (test-only; functionality inline in PrototypeReviewWorkspace)
-- [src/ui/comments/comment-sidebar-shell.tsx](/home/coder/docx-react-component/src/ui/comments/comment-sidebar-shell.tsx)
-- [src/ui/comments/comment-thread-view.tsx](/home/coder/docx-react-component/src/ui/comments/comment-thread-view.tsx)
-- [src/ui/review/revision-sidebar.tsx](/home/coder/docx-react-component/src/ui/review/revision-sidebar.tsx)
-- [src/ui/review/markup-display-switch.tsx](/home/coder/docx-react-component/src/ui/review/markup-display-switch.tsx)
-- [src/ui/review/accept-reject-actions.tsx](/home/coder/docx-react-component/src/ui/review/accept-reject-actions.tsx)
-- [src/ui/shared/revision-filters.ts](/home/coder/docx-react-component/src/ui/shared/revision-filters.ts)
-- [src/ui/shared/summary-chip.tsx](/home/coder/docx-react-component/src/ui/shared/summary-chip.tsx)
-- [src/ui/compatibility/compatibility-panel.tsx](/home/coder/docx-react-component/src/ui/compatibility/compatibility-panel.tsx)
-- [src/ui/status/status-bar.tsx](/home/coder/docx-react-component/src/ui/status/status-bar.tsx) (test-only; functionality inline in PrototypeReviewWorkspace)
-- [.tmp/wave-8-railway-pilot/keyboard-walkthrough.md](/home/coder/docx-react-component/.tmp/wave-8-railway-pilot/keyboard-walkthrough.md)
-- [.tmp/wave-8-railway-pilot/reduced-motion-smoke.json](/home/coder/docx-react-component/.tmp/wave-8-railway-pilot/reduced-motion-smoke.json)
-- [.tmp/wave-8-railway-pilot/token-drift-audit.md](/home/coder/docx-react-component/.tmp/wave-8-railway-pilot/token-drift-audit.md)
-
-## Findings
-
-1. The mounted runtime path now clears the bounded live keyboard-flow baseline.
-
-- [src/ui/editor-surface/editor-surface.tsx](/home/coder/docx-react-component/src/ui/editor-surface/editor-surface.tsx) keeps the canvas itself as the only tabbable document-surface stop via `role="textbox"` and `tabIndex={0}`.
-- The inline character, token, and caret controls in [src/ui/editor-surface/editor-surface.tsx](/home/coder/docx-react-component/src/ui/editor-surface/editor-surface.tsx) use `tabIndex={-1}`, so tab order returns to the intended harness controls -> editor toolbar -> document surface -> rail actions sequence.
-- Live comment-thread open actions and revision actions are exposed through real buttons in the mounted runtime shell, so the earlier canvas-tab-order failure is no longer current.
-
-2. Focus-visible and reduced-motion baseline are now acceptable in both the live path and the reviewed `/demo` reference.
-
-- The mounted runtime shell does not suppress browser focus indication in the reviewed `src/ui` surfaces, and the document canvas keeps a visible native outline when focused.
-- The prototype now applies a shared `focusRingClass` across its picker, toolbar, mode toggles, rail tabs, comment cards, revision cards, table cells, and inline segment affordances in [services/react-word-editor/app/demo/prototype-client.tsx](/home/coder/docx-react-component/services/react-word-editor/app/demo/prototype-client.tsx).
-- [services/react-word-editor/app/demo/prototype-client.tsx](/home/coder/docx-react-component/services/react-word-editor/app/demo/prototype-client.tsx) initializes from `prefers-reduced-motion`, listens for preference changes, disables authored transitions inside the prototype subtree, and avoids forced smooth scrolling when reduced motion is active.
-- The mounted runtime shell still has effectively no authored motion in the reviewed `src/ui` surfaces, so no additional live-motion override is needed for the current Wave 8 proof path.
-
-3. Non-color review cues remain present across both surfaces.
-
-- The mounted runtime path and the prototype both use more than color alone for review state: insertion and deletion underlines or strikethrough, status pills, preserve-only labels, locked badges, and compatibility copy remain visible.
-- The weakest small-text tones in the token layer still need later contrast polish, but the more serious remaining design work is broader token convergence across the shipped `src/ui` shell. That is real follow-up work, but it no longer blocks the bounded Wave 8 operator baseline.
-
-4. The old prototype keyboard and focus-visible blocker is obsolete.
-
-- Comment cards and revision cards in the prototype rail are now keyboardable `role="button"` surfaces with `tabIndex={0}` and `Enter` or `Space` activation in [services/react-word-editor/app/demo/prototype-client.tsx](/home/coder/docx-react-component/services/react-word-editor/app/demo/prototype-client.tsx).
-- Non-header prototype table cells are now keyboardable `role="button"` surfaces with `tabIndex={0}` and `Enter` or `Space` activation in [services/react-word-editor/app/demo/prototype-client.tsx](/home/coder/docx-react-component/services/react-word-editor/app/demo/prototype-client.tsx).
-- The current A4 blocker is therefore no longer prototype keyboard parity. That part of the board summary is stale.
-
-5. Raw token drift is real, but it is no longer the Wave 8 blocker.
-
-- The harness already declares a token layer and typography roles in [services/react-word-editor/app/globals.css](/home/coder/docx-react-component/services/react-word-editor/app/globals.css) and [services/react-word-editor/app/layout.tsx](/home/coder/docx-react-component/services/react-word-editor/app/layout.tsx).
-- Despite that, `rg -l '#[0-9a-fA-F]{3,8}' src/ui -g'*.tsx'` currently returns `19` files, and `rg -o '#[0-9a-fA-F]{3,8}' src/ui -g'*.tsx'` currently returns `174` literal hex-color occurrences across the mounted editor shell.
-- Representative drift remains in [src/ui/WordReviewEditor.tsx](/home/coder/docx-react-component/src/ui/WordReviewEditor.tsx), [src/ui/editor-surface/editor-surface.tsx](/home/coder/docx-react-component/src/ui/editor-surface/editor-surface.tsx), [src/ui/toolbar/core-toolbar.tsx](/home/coder/docx-react-component/src/ui/toolbar/core-toolbar.tsx), [src/ui/comments/comment-thread-view.tsx](/home/coder/docx-react-component/src/ui/comments/comment-thread-view.tsx), [src/ui/review/revision-sidebar.tsx](/home/coder/docx-react-component/src/ui/review/revision-sidebar.tsx), [src/ui/review/accept-reject-actions.tsx](/home/coder/docx-react-component/src/ui/review/accept-reject-actions.tsx), [src/ui/compatibility/compatibility-panel.tsx](/home/coder/docx-react-component/src/ui/compatibility/compatibility-panel.tsx), and [src/ui/status/status-bar.tsx](/home/coder/docx-react-component/src/ui/status/status-bar.tsx).
-- The outer harness shell has narrowed materially: `services/react-word-editor/app` plus `services/react-word-editor/components` is now down to `1` literal-hex file and `3` literal-hex occurrences, all in [services/react-word-editor/app/fixtures/page.tsx](/home/coder/docx-react-component/services/react-word-editor/app/fixtures/page.tsx). The prototype itself now has `0` literal hex-color occurrences.
-- Typography posture also still drifts: the prototype reading column opts into the declared serif or sans roles in [services/react-word-editor/app/demo/prototype-client.tsx](/home/coder/docx-react-component/services/react-word-editor/app/demo/prototype-client.tsx), while the current `src/ui` shell does not reference `--font-legal-serif`, `--font-legal-sans`, or any explicit font role at all.
-- That drift is broader visual-system convergence work inside the shipped editor shell. It should move into Wave 9 alongside reviewer-task pilot hardening, rather than keeping Wave 8 open after the actual harness accessibility bar is met.
-
-## Prototype Alignment Notes
-
-The prototype remains the clearer expression of the intended product direction, and the
-mounted runtime path still drifts from it in three material areas:
-
-- Curated typography: the prototype opts the reading column into the declared serif or sans roles, while the live runtime shell still reads like a separate inline-styled subsystem inside the harness frame.
-- Trust posture: the outer harness frame is now token-backed, but the mounted runtime shell still repeats a warm-neutral palette locally inside `src/ui` rather than consuming the shared token layer directly.
-- Table posture: the prototype can preview future table affordances honestly, but the live runtime path does not yet converge visually on that story. That is acceptable only because the docs remain explicit that tables stay prototype-only in Wave 8.
-
-Those are drift observations, not support claims.
-
-## Validation
-
-Focused commands run on the current worktree:
-
-```bash
-pnpm test:harness
-pnpm --filter @docx-react-component/react-word-editor-harness build
-```
-
-Results from the latest rerun:
-
-- `pnpm test:harness`: `16` pass, `0` fail.
-- `pnpm --filter @docx-react-component/react-word-editor-harness build`: pass.
-
-## Closure Recommendation
-
-Close the Wave 8 A4 gate.
-
-The actual Wave 8 bar is now satisfied:
-
-- the mounted harness path is keyboard-bounded and visibly focusable
-- reduced-motion handling is explicitly reviewed
-- the prototype reference no longer carries the earlier keyboard or focus-visible debt
-- the operator harness shell itself is substantially token-backed and no longer the main drift source
-
-The remaining token and typography debt is in the broader shipped `src/ui` visual system.
-That work matters, but it is now a Wave 9 convergence follow-up rather than a valid reason
-to keep `railway-test-harness` below `baseline-proved` for the bounded Wave 8 baseline.
-The `21:13 UTC` board projection already reflects that state by clearing the A4 proof gap.
-
-## Evidence
-
-- Durable review note: `docs/plans/waves/reviews/wave-8-accessibility-and-design.md`
-- Machine-visible keyboard note: `.tmp/wave-8-railway-pilot/keyboard-walkthrough.md`
-- Machine-visible reduced-motion report: `.tmp/wave-8-railway-pilot/reduced-motion-smoke.json`
-- Machine-visible token audit: `.tmp/wave-8-railway-pilot/token-drift-audit.md`

package/docs/plans/waves/reviews/wave-8-cont-qa.md

@@ -1,92 +0,0 @@
-# Wave 8 Continuous QA
-
-Generated on `2026-03-26` for Wave 8 / A0.
-
-Verdict: `BLOCKED`
-
-[wave-gate] architecture=blocked integration=blocked durability=blocked live=blocked docs=blocked detail=Wave 8 hardening is in source, but the old public early-access bundle is historical only and the fresh private-mode redeploy proof is still missing.
-
-## Scope
-
-Wave 8 does not currently close the bounded non-production operator bar:
-
-- the source contains the hardening needed for a private-mode redeploy
-- the older public `early-access` proof bundle is retained as historical evidence
-- current promotions remain blocked until a fresh private-mode mounted `.docx -> add comment -> review action -> export -> validate` proof is recaptured on Railway
-
-This note does not widen the active v1 editor contract. Wave 9 still owns reviewer-task pilot proof, representative scenario runs, and broader performance evidence.
-
-## Evidence Reviewed
-
-- [wave-8-live-proof.md](/home/coder/docx-react-component/docs/plans/waves/reviews/wave-8-live-proof.md)
-- [wave-8-accessibility-and-design.md](/home/coder/docx-react-component/docs/plans/waves/reviews/wave-8-accessibility-and-design.md)
-- [wave-8-security.md](/home/coder/docx-react-component/docs/plans/waves/reviews/wave-8-security.md)
-- [review-save-validate-proof.md](/home/coder/docx-react-component/.tmp/wave-8-railway-pilot/review-save-validate-proof.md)
-- [deploy-manifest.json](/home/coder/docx-react-component/.tmp/wave-8-railway-pilot/deploy-manifest.json)
-- [artifact-retention-check.json](/home/coder/docx-react-component/.tmp/wave-8-railway-pilot/artifact-retention-check.json)
-- [component-cutover-matrix.md](/home/coder/docx-react-component/docs/plans/component-cutover-matrix.md)
-- [component-cutover-matrix.json](/home/coder/docx-react-component/docs/plans/component-cutover-matrix.json)
-- [current-state.md](/home/coder/docx-react-component/docs/plans/current-state.md)
-- [master-plan.md](/home/coder/docx-react-component/docs/plans/master-plan.md)
-- [roadmap.md](/home/coder/docx-react-component/docs/roadmap.md)
-
-## Current Truth
-
-1. The Wave 8 hardening work is in source, but the historical public `early-access` bundle is no
-   longer authoritative closure evidence.
-
-- The mounted `F11` review-save-validate artifact chain under `.tmp/wave-8-railway-pilot/`
-  remains useful historical evidence.
-- The current closure bar now requires a fresh private-mode Railway redeploy and a recaptured
-  mounted proof bundle under that hardened route posture.
-
-2. The blocking condition is not missing implementation work inside the repo.
-
-- The harness and validator private-mode guards, request-size controls, and retention controls are
-  present in source, including the pre-parse body-size guard on `/api/exports`.
-- The remaining blocker is proof freshness and deploy posture alignment, especially the still-public
-  validator ingress and the lack of a fresh private-mode recapture, not a claim that the code paths
-  are absent.
-
-3. Wave 8 promotions must remain blocked in shared docs until the fresh private-mode proof exists.
-
-- `railway-test-harness` and `openxml-sdk-validator-service` remain the intended Wave 8 promotion
-  targets.
-- They must not be treated as current `baseline-proved` or `pilot-live` closure truth while the
-  public `early-access` capture remains the newest linked proof bundle.
-
-## Residual Risks
-
-- The current live proof bundle was captured against the older public `early-access` posture and is
-  therefore historical evidence only.
-- The validator Railway status drift remains documented as an operator caveat, but the active
-  blocker is broader: the public validator ingress is still live and stale relative to the current
-  private-mode source contract.
-- The `/demo` route still carries non-blocking keyboard/token drift that should stay visible for
-  Wave 9 rather than being misreported as current Wave 8 closure truth.
-
-## Closure Recommendation
-
-Keep Wave 8 blocked until the private-mode redeploy reruns the mounted live proof bundle and the
-shared-plan state is refreshed from that new capture.
-
-## Fresh Local Corroboration
-
-Focused local validation rerun during this cont-QA pass:
-
-- `pnpm test:harness` -> pass (`16` pass, `0` fail)
-- `pnpm --filter @docx-react-component/react-word-editor-harness build` -> pass
-
-## Closure Decision
-
-Wave 8 remains blocked.
-
-- The historical public `early-access` bundle cannot stand as the current closure line after the
-  private-mode hardening changes.
-- The security review remains the authoritative blocker for shared status and promotion claims,
-  including the stale public validator ingress.
-- Shared docs must continue to describe the Wave 8 state as `hardening landed in source, but
-  closure blocked pending fresh private-mode redeploy proof`.
-
-[wave-gate] architecture=blocked integration=blocked durability=blocked live=blocked docs=blocked detail=Wave 8 hardening is in source, but the historical public early-access bundle cannot stand as current closure proof after the private-mode route posture change.
-Verdict: BLOCKED