@q1travel/design-system 0.31.0 → 0.31.2

package/contracts/design.dark.md

@@ -456,6 +456,7 @@ Four passes. Do not start at pass three.
 - Core tokens define source design values such as color, spacing, radius, and typography.
 - Semantic tokens describe product meaning such as action, surface, border, text, focus, and status.
 - Component mappings consume semantic tokens and define shared behavior for controls and documentation specimens.
+- Input focus shadows use one 4px, 16% semantic-color halo: `--q1-shadow-focus-input` uses focus and `--q1-shadow-focus-input-danger` uses status-danger. Existing real borders retain their resting colors on focus. The shared `--q1-shadow-focus` and `--q1-shadow-focus-danger` keep their two layers. Resting danger shadows that directly consume either input token follow that token; other resting field error shadows remain unchanged.
 
 ## Usage
 
@@ -533,10 +534,14 @@ CheckCircleFill accepts `tone?: 'default' | 'success'` (default `default`); succ
 
 **Stat.** Tier C read-only single statistic: `label: string` and `value: ReactNode` are required; `unit?: ReactNode` and `placeholder?: ReactNode` are optional. Only null or undefined values use the placeholder (default `—`); 0, "0", and the empty string remain unchanged. Native HTMLDListElement attributes and className pass through the root. Structure is `<dl class="stat"><dt class="stat__label">label</dt><dd class="stat__value">value<span class="stat__unit">unit</span></dd></dl>`; omit the span when no unit is supplied. Label and unit use label-14 with text-muted; the value uses heading-20-strong with text-primary and tabular-nums. Unit text aligns on the baseline; long content wraps within narrow hosts. The placeholder is visual content without additional ARIA. Stat creates no headings, live regions or interactive elements; hosts own layout, Card surfaces, trends, links and loading. No new tokens or existing-consumer migration; remove Stat usages before reverting this additive export.
 
+**FileInput.** Tier B native file selection. Root `div.file-input` contains `input.file-input__native.q1-sr-only` (`type="file"`, `tabIndex=-1`, `aria-hidden=true`), DS `Button.file-input__trigger` (`type="button"`) and `span.file-input__status` (`role="status"`). `name`, `accept`, `multiple`, `required`, `disabled`, `onChange` and `ref` act on the input; ref exposes files and clearing. `id` and all aria attributes act on the button for Label htmlFor / FormField controlId. `className` merges on the root. `buttonLabel?: ReactNode` defaults to 选择文件; variant defaults to secondary and size follows Button. Props derive from input props excluding type/value/defaultValue/children and replacing native numeric size with ButtonSize; only the listed attributes take effect. Status starts empty, shows a single filename or 已选 N 个文件, truncates on one line and retains all names in title. Native validation retains its default event handling and first-invalid-control order. When the invalid hidden input receives focus, its focus listener immediately marks aria-invalid=true and transfers focus to the visible button. Calling form.checkValidity() alone neither moves focus nor marks the button. Selecting files and form reset clear automatic invalid state; an explicit caller aria-invalid, including false, takes precedence. An enabled aria-invalid=true trigger uses the status-danger border at rest and on hover, and shadow-focus-input-danger for focus-visible; resting invalid adds no shadow and disabled styling is unchanged. Callers provide error copy through FormField. Native change and form reset synchronize status; reset waits for the native value to clear. After imperative ref clearing, dispatch change to synchronize display. Caller owns files, validation and upload; no reset prop, drag/drop, progress, preview or file list. Native button keyboard, accessible naming and shared focus ring satisfy Tier B; input is hidden from keyboard and accessibility tree. Existing consumers need no migration; remove new usages before reverting additive exports, CSS and route.
+
+**Stepper.** Tier C read-only horizontal steps. Required `steps: StepperStep[]` contains `label: ReactNode` and optional `description?: ReactNode`; required `current: number` is zero-based. Negative current is treated as 0; earlier steps are complete, the matching step is current, later steps are upcoming. Current at or above length completes all steps without a current item. Native ol attributes pass through and className merges; children are supplied through steps. DOM: `ol.stepper > li.stepper__step`, with exactly one state class `stepper__step--complete`, `stepper__step--current` or `stepper__step--upcoming`; only the current li carries `aria-current="step"`. The decorative indicator is aria-hidden; complete uses CheckCircleFill with its default tone, current uses an emphasized numbered circle, upcoming a neutral outlined circle. Every item includes visually hidden state text: 已完成 / 当前步骤 / 未开始. Labels use label-14 and text-primary; descriptions use label-13 and text-muted. Connectors use text-primary after completed steps, border-strong otherwise. Existing tokens only; long labels wrap without overflow in hosts of 360px or less. No built-in navigation, error states, orientation, size or keyboard model. Existing consumers need no migration; remove new usages before reverting the additive exports and route.
+
 **Status and feedback.** Banner, ProjectBanner, Note, ErrorCard, RegionErrorState, ErrorMessage, EmptyState, Badge, Pill, CheckCircleFill, StatusDot, ToastProvider, useToast, Feedback, PageFeedback, Spinner, LoadingDots, Skeleton, StatusPage, SkeletonIllustration, EmptyListIllustration.
 
-- Banner announces at page scope. Note is an inline aside. ErrorMessage sits against one field. ErrorCard replaces a region that failed to load. Picking the widest one available overstates the problem.
-- RegionErrorState replaces only the failed region in place (table body under a kept header, card body, page section) while the rest of the page stays usable: neutral surface, danger color on the icon only, polite `role=status` by default, built-in retry that keeps focus while `retrying`. ErrorCard is for a failure that blocks the current task (danger card, assertive `role=alert`). EmptyState is a successful load with no data: default `layout="center"` keeps the full empty view; `layout="inline"` is an icon and regular secondary title row inside a section whose heading and actions belong to the host, without description, actions, headingLevel, or illustration. Center accepts a decorative `illustration?: ReactNode` in place of icon; when neither illustration nor icon is supplied, it renders `EmptyListIllustration variant="neutral"` inside the decorative `empty-state__illustration` slot. Explicit icons retain their slot with a transparent background in both themes. Built-in `EmptyListIllustration` accepts `scene?: 'list' | 'search' | 'complete' | 'chart' | 'inventory' | 'orders' | 'product' | 'permission'` and the compatible `variant?: 'complete' | 'neutral'`. Explicit scene takes priority; without scene, neutral maps to list and all other calls default to complete. Accepted #830 intentionally changes both standalone default complete and EmptyState default list artwork and internal SVG structure; the outer decorative span, class and 96×104 viewBox remain. Complete draws its own decorative check without depending on CheckCircleFill. All scenes use opaque neutral bodies, token radii, canonical stroke width, and at most one brand-colored element (light primary-700, dark primary-900); geometry is identical across themes. Body contrast against the actual panel is at least 1.3:1. Both variants have no icon backplate. `layout="strip"` adds a full-width neutral strip for list failures and load-more rows, with retry always inside its right edge. See `implementation-map.md` for the retry and announcement boundary.
+- Banner accepts a string `title` and paragraph-inline `children` (text and inline Link, no block elements). `action: BannerAction` is either `{ label, href }` or `{ label, onClick, loading?, disabled? }`, mutually exclusive. The exported `BannerAction` derives button events and states from ButtonProps. Buttons use `type="button"`, size sm, rounded, primary for announcements and secondary for tone strips, with layout class `banner__button-action`. Loading retains focus with aria-disabled and blocks activation; disabled takes priority and leaves the Tab order. Loading adds no aria-busy; Banner adds no role or live region. Progress ignores either action. Existing links and calls omitting new capabilities retain their complete markup; no existing consumer migration is required. Remove button calls and BannerAction imports before reverting this addition. Banner announces at page scope. Note is an inline aside. ErrorMessage sits against one field. ErrorCard replaces a region that failed to load. Picking the widest one available overstates the problem.
+- RegionErrorState replaces only the failed region in place (table body under a kept header, card body, page section) while the rest of the page stays usable: neutral surface, danger color on the icon only, polite `role=status` by default, built-in retry that keeps focus while `retrying`. ErrorCard is for a failure that blocks the current task (danger card, assertive `role=alert`). EmptyState is a successful load with no data: default `layout="center"` keeps the full empty view; `layout="inline"` is a small illustration or icon and regular secondary title row inside a section whose heading and actions belong to the host, without description, actions, or headingLevel. Inline accepts `illustration?: ReactNode`, using `--q1-space-16` (64px) for its width and preserving the artwork aspect ratio; illustration takes priority over icon with a development warning when both are supplied. Without illustration, existing icon-only and title-only calls stay unchanged. Center accepts a decorative `illustration?: ReactNode` in place of icon; when neither illustration nor icon is supplied, it renders `EmptyListIllustration variant="neutral"` inside the decorative `empty-state__illustration` slot. Explicit icons retain their slot with a transparent background in both themes. Both layouts accept `titleHidden?: boolean`: true adds `empty-state--title-hidden` to the existing root and `q1-sr-only` to the required title, preserving its p or h2–h6 tag, text and accessibility semantics. Center keeps illustration/icon, optional description and actions; inline keeps its small illustration or icon. The hidden title takes no layout space; remaining siblings keep the existing gap and margins, and an illustration/icon alone has no trailing margin. Omitted or false preserves the existing DOM, classes and styles exactly. Built-in `EmptyListIllustration` accepts `scene?: 'list' | 'search' | 'complete' | 'chart' | 'inventory' | 'orders' | 'product' | 'permission' | 'purchase' | 'supplier' | 'team' | 'notification' | 'store' | 'task' | 'session' | 'activity'` and the compatible `variant?: 'complete' | 'neutral'`. Explicit scene takes priority; without scene, neutral maps to list and all other calls default to complete. Accepted #830 intentionally changes both standalone default complete and EmptyState default list artwork and internal SVG structure; the outer decorative span, class and 96×104 viewBox remain. Complete draws its own decorative check without depending on CheckCircleFill. All scenes use opaque neutral bodies, token radii, canonical stroke width, and exactly one brand-colored element (light primary-700, dark primary-900); geometry is identical across themes. Body contrast against the actual panel is at least 1.3:1. Both variants have no icon backplate. `layout="strip"` adds a full-width neutral strip for list failures and load-more rows, with retry always inside its right edge. See `implementation-map.md` for the retry and announcement boundary.
 - StatusPage defaults to a whole unavailable page with a caller-owned title, decorative SkeletonIllustration, plain-text description rendered as a paragraph, and actions. Its size="region" variant centers an icon or small illustration, title, description, and up to two actions inside a substantial content region, with a transparent background and content-driven height. ErrorCard covers a blocking compact failure; RegionErrorState is a compact retryable region message with its own status announcement; EmptyState means loading succeeded without content. StatusPage headingLevel accepts 1–6 (default 1); choose the next heading level under the host section. Existing omitted, 1 and 2 calls need no migration. StatusPage creates no live region; its host owns focus and announcements. StatusPage code is metadata only, never a message or spoken number.
 - RegionErrorState replaces only the failed region in place (table body under a kept header, card body, page section) while the rest of the page stays usable: neutral surface, danger color on the icon only, polite `role=status` by default, built-in retry that keeps focus while `retrying`. ErrorCard is for a failure that blocks the current task (danger card, assertive `role=alert`). EmptyState is a successful load with no data. `layout="strip"` adds a full-width neutral strip for list failures and load-more rows, with retry always inside its right edge. See `implementation-map.md` for the retry and announcement boundary.
 - Toast is for non-blocking confirmation of something that already happened. It is not where an error the reader must act on belongs.

package/contracts/design.md

@@ -456,6 +456,7 @@ Four passes. Do not start at pass three.
 - Core tokens define source design values such as color, spacing, radius, and typography.
 - Semantic tokens describe product meaning such as action, surface, border, text, focus, and status.
 - Component mappings consume semantic tokens and define shared behavior for controls and documentation specimens.
+- Input focus shadows use one 4px, 16% semantic-color halo: `--q1-shadow-focus-input` uses focus and `--q1-shadow-focus-input-danger` uses status-danger. Existing real borders retain their resting colors on focus. The shared `--q1-shadow-focus` and `--q1-shadow-focus-danger` keep their two layers. Resting danger shadows that directly consume either input token follow that token; other resting field error shadows remain unchanged.
 
 ## Usage
 
@@ -533,10 +534,14 @@ CheckCircleFill accepts `tone?: 'default' | 'success'` (default `default`); succ
 
 **Stat.** Tier C read-only single statistic: `label: string` and `value: ReactNode` are required; `unit?: ReactNode` and `placeholder?: ReactNode` are optional. Only null or undefined values use the placeholder (default `—`); 0, "0", and the empty string remain unchanged. Native HTMLDListElement attributes and className pass through the root. Structure is `<dl class="stat"><dt class="stat__label">label</dt><dd class="stat__value">value<span class="stat__unit">unit</span></dd></dl>`; omit the span when no unit is supplied. Label and unit use label-14 with text-muted; the value uses heading-20-strong with text-primary and tabular-nums. Unit text aligns on the baseline; long content wraps within narrow hosts. The placeholder is visual content without additional ARIA. Stat creates no headings, live regions or interactive elements; hosts own layout, Card surfaces, trends, links and loading. No new tokens or existing-consumer migration; remove Stat usages before reverting this additive export.
 
+**FileInput.** Tier B native file selection. Root `div.file-input` contains `input.file-input__native.q1-sr-only` (`type="file"`, `tabIndex=-1`, `aria-hidden=true`), DS `Button.file-input__trigger` (`type="button"`) and `span.file-input__status` (`role="status"`). `name`, `accept`, `multiple`, `required`, `disabled`, `onChange` and `ref` act on the input; ref exposes files and clearing. `id` and all aria attributes act on the button for Label htmlFor / FormField controlId. `className` merges on the root. `buttonLabel?: ReactNode` defaults to 选择文件; variant defaults to secondary and size follows Button. Props derive from input props excluding type/value/defaultValue/children and replacing native numeric size with ButtonSize; only the listed attributes take effect. Status starts empty, shows a single filename or 已选 N 个文件, truncates on one line and retains all names in title. Native validation retains its default event handling and first-invalid-control order. When the invalid hidden input receives focus, its focus listener immediately marks aria-invalid=true and transfers focus to the visible button. Calling form.checkValidity() alone neither moves focus nor marks the button. Selecting files and form reset clear automatic invalid state; an explicit caller aria-invalid, including false, takes precedence. An enabled aria-invalid=true trigger uses the status-danger border at rest and on hover, and shadow-focus-input-danger for focus-visible; resting invalid adds no shadow and disabled styling is unchanged. Callers provide error copy through FormField. Native change and form reset synchronize status; reset waits for the native value to clear. After imperative ref clearing, dispatch change to synchronize display. Caller owns files, validation and upload; no reset prop, drag/drop, progress, preview or file list. Native button keyboard, accessible naming and shared focus ring satisfy Tier B; input is hidden from keyboard and accessibility tree. Existing consumers need no migration; remove new usages before reverting additive exports, CSS and route.
+
+**Stepper.** Tier C read-only horizontal steps. Required `steps: StepperStep[]` contains `label: ReactNode` and optional `description?: ReactNode`; required `current: number` is zero-based. Negative current is treated as 0; earlier steps are complete, the matching step is current, later steps are upcoming. Current at or above length completes all steps without a current item. Native ol attributes pass through and className merges; children are supplied through steps. DOM: `ol.stepper > li.stepper__step`, with exactly one state class `stepper__step--complete`, `stepper__step--current` or `stepper__step--upcoming`; only the current li carries `aria-current="step"`. The decorative indicator is aria-hidden; complete uses CheckCircleFill with its default tone, current uses an emphasized numbered circle, upcoming a neutral outlined circle. Every item includes visually hidden state text: 已完成 / 当前步骤 / 未开始. Labels use label-14 and text-primary; descriptions use label-13 and text-muted. Connectors use text-primary after completed steps, border-strong otherwise. Existing tokens only; long labels wrap without overflow in hosts of 360px or less. No built-in navigation, error states, orientation, size or keyboard model. Existing consumers need no migration; remove new usages before reverting the additive exports and route.
+
 **Status and feedback.** Banner, ProjectBanner, Note, ErrorCard, RegionErrorState, ErrorMessage, EmptyState, Badge, Pill, CheckCircleFill, StatusDot, ToastProvider, useToast, Feedback, PageFeedback, Spinner, LoadingDots, Skeleton, StatusPage, SkeletonIllustration, EmptyListIllustration.
 
-- Banner announces at page scope. Note is an inline aside. ErrorMessage sits against one field. ErrorCard replaces a region that failed to load. Picking the widest one available overstates the problem.
-- RegionErrorState replaces only the failed region in place (table body under a kept header, card body, page section) while the rest of the page stays usable: neutral surface, danger color on the icon only, polite `role=status` by default, built-in retry that keeps focus while `retrying`. ErrorCard is for a failure that blocks the current task (danger card, assertive `role=alert`). EmptyState is a successful load with no data: default `layout="center"` keeps the full empty view; `layout="inline"` is an icon and regular secondary title row inside a section whose heading and actions belong to the host, without description, actions, headingLevel, or illustration. Center accepts a decorative `illustration?: ReactNode` in place of icon; when neither illustration nor icon is supplied, it renders `EmptyListIllustration variant="neutral"` inside the decorative `empty-state__illustration` slot. Explicit icons retain their slot with a transparent background in both themes. Built-in `EmptyListIllustration` accepts `scene?: 'list' | 'search' | 'complete' | 'chart' | 'inventory' | 'orders' | 'product' | 'permission'` and the compatible `variant?: 'complete' | 'neutral'`. Explicit scene takes priority; without scene, neutral maps to list and all other calls default to complete. Accepted #830 intentionally changes both standalone default complete and EmptyState default list artwork and internal SVG structure; the outer decorative span, class and 96×104 viewBox remain. Complete draws its own decorative check without depending on CheckCircleFill. All scenes use opaque neutral bodies, token radii, canonical stroke width, and at most one brand-colored element (light primary-700, dark primary-900); geometry is identical across themes. Body contrast against the actual panel is at least 1.3:1. Both variants have no icon backplate. `layout="strip"` adds a full-width neutral strip for list failures and load-more rows, with retry always inside its right edge. See `implementation-map.md` for the retry and announcement boundary.
+- Banner accepts a string `title` and paragraph-inline `children` (text and inline Link, no block elements). `action: BannerAction` is either `{ label, href }` or `{ label, onClick, loading?, disabled? }`, mutually exclusive. The exported `BannerAction` derives button events and states from ButtonProps. Buttons use `type="button"`, size sm, rounded, primary for announcements and secondary for tone strips, with layout class `banner__button-action`. Loading retains focus with aria-disabled and blocks activation; disabled takes priority and leaves the Tab order. Loading adds no aria-busy; Banner adds no role or live region. Progress ignores either action. Existing links and calls omitting new capabilities retain their complete markup; no existing consumer migration is required. Remove button calls and BannerAction imports before reverting this addition. Banner announces at page scope. Note is an inline aside. ErrorMessage sits against one field. ErrorCard replaces a region that failed to load. Picking the widest one available overstates the problem.
+- RegionErrorState replaces only the failed region in place (table body under a kept header, card body, page section) while the rest of the page stays usable: neutral surface, danger color on the icon only, polite `role=status` by default, built-in retry that keeps focus while `retrying`. ErrorCard is for a failure that blocks the current task (danger card, assertive `role=alert`). EmptyState is a successful load with no data: default `layout="center"` keeps the full empty view; `layout="inline"` is a small illustration or icon and regular secondary title row inside a section whose heading and actions belong to the host, without description, actions, or headingLevel. Inline accepts `illustration?: ReactNode`, using `--q1-space-16` (64px) for its width and preserving the artwork aspect ratio; illustration takes priority over icon with a development warning when both are supplied. Without illustration, existing icon-only and title-only calls stay unchanged. Center accepts a decorative `illustration?: ReactNode` in place of icon; when neither illustration nor icon is supplied, it renders `EmptyListIllustration variant="neutral"` inside the decorative `empty-state__illustration` slot. Explicit icons retain their slot with a transparent background in both themes. Both layouts accept `titleHidden?: boolean`: true adds `empty-state--title-hidden` to the existing root and `q1-sr-only` to the required title, preserving its p or h2–h6 tag, text and accessibility semantics. Center keeps illustration/icon, optional description and actions; inline keeps its small illustration or icon. The hidden title takes no layout space; remaining siblings keep the existing gap and margins, and an illustration/icon alone has no trailing margin. Omitted or false preserves the existing DOM, classes and styles exactly. Built-in `EmptyListIllustration` accepts `scene?: 'list' | 'search' | 'complete' | 'chart' | 'inventory' | 'orders' | 'product' | 'permission' | 'purchase' | 'supplier' | 'team' | 'notification' | 'store' | 'task' | 'session' | 'activity'` and the compatible `variant?: 'complete' | 'neutral'`. Explicit scene takes priority; without scene, neutral maps to list and all other calls default to complete. Accepted #830 intentionally changes both standalone default complete and EmptyState default list artwork and internal SVG structure; the outer decorative span, class and 96×104 viewBox remain. Complete draws its own decorative check without depending on CheckCircleFill. All scenes use opaque neutral bodies, token radii, canonical stroke width, and exactly one brand-colored element (light primary-700, dark primary-900); geometry is identical across themes. Body contrast against the actual panel is at least 1.3:1. Both variants have no icon backplate. `layout="strip"` adds a full-width neutral strip for list failures and load-more rows, with retry always inside its right edge. See `implementation-map.md` for the retry and announcement boundary.
 - StatusPage defaults to a whole unavailable page with a caller-owned title, decorative SkeletonIllustration, plain-text description rendered as a paragraph, and actions. Its size="region" variant centers an icon or small illustration, title, description, and up to two actions inside a substantial content region, with a transparent background and content-driven height. ErrorCard covers a blocking compact failure; RegionErrorState is a compact retryable region message with its own status announcement; EmptyState means loading succeeded without content. StatusPage headingLevel accepts 1–6 (default 1); choose the next heading level under the host section. Existing omitted, 1 and 2 calls need no migration. StatusPage creates no live region; its host owns focus and announcements. StatusPage code is metadata only, never a message or spoken number.
 - RegionErrorState replaces only the failed region in place (table body under a kept header, card body, page section) while the rest of the page stays usable: neutral surface, danger color on the icon only, polite `role=status` by default, built-in retry that keeps focus while `retrying`. ErrorCard is for a failure that blocks the current task (danger card, assertive `role=alert`). EmptyState is a successful load with no data. `layout="strip"` adds a full-width neutral strip for list failures and load-more rows, with retry always inside its right edge. See `implementation-map.md` for the retry and announcement boundary.
 - Toast is for non-blocking confirmation of something that already happened. It is not where an error the reader must act on belongs.

package/contracts/implementation-map.md

@@ -102,6 +102,11 @@ Click, ArrowLeft/ArrowRight, Home, and End notify activation; controlled selecti
 changes only when the parent updates `value`. Keyboard navigation follows the
 focused enabled tab while the parent update is pending, and a later value update
 does not pull focus from the activated button. Consumers own URL synchronization.
+Line disabled labels and their icons use `text-muted`, with at least 3:1 contrast
+against the background in both themes and less contrast than enabled labels. Hover
+and press do not strengthen disabled items. A selected-disabled style combination
+keeps a muted underline; unselected disabled items have no underline. Runtime
+selection still falls back to an enabled item as described above.
 
 ## Record activity (accepted 2026-10-06)
 
@@ -154,3 +159,7 @@ The announcement region wraps only the icon, the `q1-sr-only` 「错误：」 pr
 ## ThemeSwitcher selection appearance
 
 Accepted 2026-11-02 (#761): ThemeSwitcher keeps a single outer group border. Options have no border; selection uses `--q1-color-bg-selected-neutral` and primary text, with no inset selection edge. Unselected options keep secondary text and the container background. Light and dark selected and unselected text meet 4.5:1 contrast; the selected background differs from the container. Native labeled radios retain their keyboard behavior, hover changes enabled option text to primary, and keyboard focus uses the shared focus shadow. Public props, class names, DOM structure, exports, and tokens are unchanged.
+
+## EmptyState title visibility
+
+Accepted #568: `EmptyState` supports `titleHidden?: boolean` in both center and inline layouts. Both layouts accept `titleHidden?: boolean`: true adds `empty-state--title-hidden` to the existing root and `q1-sr-only` to the required title, preserving its p or h2–h6 tag, text and accessibility semantics. Center keeps illustration/icon, optional description and actions; inline keeps its small illustration or icon. Inline accepts `illustration?: ReactNode` with width `--q1-space-16` (64px), preserving the artwork aspect ratio; illustration takes priority over icon and supplying both emits a development warning. Description, actions and headingLevel remain center-only. Existing inline icon-only and title-only calls retain their exact rendering. The hidden title takes no layout space; remaining siblings keep the existing gap and margins, and an illustration/icon alone has no trailing margin. Omitted or false preserves the existing DOM, classes and styles exactly.

package/contracts/interface-guidelines.md

@@ -243,4 +243,8 @@ Component pages follow one skeleton so a reader who has used one page can find t
 
 ### Empty illustrations
 
-Accepted #830: decorative empty illustrations share a 96×104 viewBox, radius-3 outer frames, radius-1 clips, and ICON_STROKE_WIDTH round strokes. All scene geometry, including half the computed stroke width around each element, stays inside the viewBox. Inventory integrates the bell into the shelf; permission centers a complete padlock on the panel; product uses a front-facing label. No detached brand decorations. The family specimen uses one site-themed card per scene, four columns on wide screens and two on narrow screens. Opaque neutral bodies must contrast at least 1.3:1 against the actual card background. Use no gradients, shadows or particles; at most one element uses primary-700 in light and primary-900 in dark, with identical geometry. Scene selects list, search, complete, chart, inventory, orders, product or permission. Scene takes precedence over the compatible variant; absent scene, neutral maps to list and all other calls to complete. Standalone complete and EmptyState list defaults intentionally receive new artwork and internal SVG structure. Keep the decorative outer span, aria-hidden=true, non-focusable SVG and text-owned state meaning. Complete owns its check; CheckCircleFill semantics are unchanged.
+Accepted #830: decorative empty illustrations share a 96×104 viewBox, radius-3 outer frames, radius-1 clips, and ICON_STROKE_WIDTH round strokes. All scene geometry, including half the computed stroke width around each element, stays inside the viewBox. Inventory integrates the bell into the shelf; permission centers a complete padlock on the panel; product uses a front-facing label. No detached brand decorations. The family specimen uses one site-themed card per scene, four columns on wide screens and two on narrow screens. Opaque neutral bodies must contrast at least 1.3:1 against the actual card background. Use no gradients, shadows or particles; exactly one element uses primary-700 in light and primary-900 in dark, with identical geometry. Scene selects list, search, complete, chart, inventory, orders, product, permission, purchase, supplier, team, notification, store, task, session or activity. Scene takes precedence over the compatible variant; absent scene, neutral maps to list and all other calls to complete. Standalone complete and EmptyState list defaults intentionally receive new artwork and internal SVG structure. Keep the decorative outer span, aria-hidden=true, non-focusable SVG and text-owned state meaning. Complete owns its check; CheckCircleFill semantics are unchanged.
+
+### EmptyState illustration-only presentation
+
+Accepted #568: `titleHidden` visually hides the required title using `q1-sr-only`, while retaining its original paragraph or heading semantics and accessible text. Illustration/icon remains decorative; description and actions are independent optional center content. Inline accepts a small decorative `illustration?: ReactNode` at `--q1-space-16` (64px) width, preserving its aspect ratio; illustration takes priority over icon, with a development warning when both are supplied. Inline description, actions and headingLevel remain unsupported. Omitted or false leaves the default presentation unchanged; existing inline calls without illustration retain their rendering.

package/contracts/table-migration.md

@@ -39,6 +39,11 @@ library, router, or product-side data model.
   navigation in this contract.
 - `renderRow` and composed cells may extend row presentation, but they must
   preserve the table's heading, cell, focus, and selection semantics.
+  `TableRowRenderContext<T>.selectionCell: ReactNode | null` exposes the exact
+  complete selection cell used by default rows, including the library Checkbox,
+  accessible name, controlled state, disabled state, and change handler. It is
+  `null` without `selection`. Reuse it when composing content cells; `cells`
+  remains unchanged and still includes the selection cell, so do not render both.
 - Loading, empty, and error states are explicit consumer-owned surfaces. Table
   must not invent fetch status, error copy, recovery actions, or business
   permissions. An empty result may be rendered as an adjacent Empty State
@@ -60,9 +65,25 @@ requires each capability.
 - Selection is controlled by the consumer. Table receives the selected row keys
   and reports the next selected-key collection through its change callback; it
   does not keep an independent authoritative selection store.
+- `onSelectionChange(selectedKeys, details)` keeps the selected-key array contents
+  and ordering unchanged. Existing single-argument callbacks remain assignable.
+  The exported `TableSelectionChangeDetails` is `{ type: 'row' | 'page';
+  rowKey?: TableRowKey; checked: boolean; shiftKey: boolean }`. Row changes include
+  `rowKey`; current-page changes omit the property entirely. `checked` is the
+  control's target state. `shiftKey` reads the triggering native event modifier,
+  defaulting to `false` when absent, including native Shift-click and Shift-Space.
+  These details do not implement range selection or change default selection behavior.
 - A row is selectable only when the consumer exposes it as selectable. Selection
-  controls use native checkboxes with accessible names and a visible
-  `:focus-visible` state.
+  controls use the library `Checkbox` with accessible names and a visible
+  `:focus-visible` state. Header and default row selection share the bare
+  `span.control-option.control-option--bare` shell, native checkbox input, and
+  `span.control-option__visual`. The former `table__checkbox-control` label is
+  removed; consumers targeting it must use the selection cell and Checkbox
+  structure. Both controls have equal visual dimensions and horizontal centers,
+  and their visual centers align vertically with the first text column,
+  retain the selection-column width, and use canonical theme tokens. Coarse
+  pointers retain the minimum touch target. Header `indeterminate` and
+  `aria-checked="mixed"` expose partial selection.
 - The header select-all control operates on the currently rendered/selectable
   page only.
 - Selecting all adds the selectable keys visible on the current page to the

package/contracts/token-naming.md

@@ -111,9 +111,9 @@ Examples:
 
 Owner-approved exception (2026-10-05): ErrorMessage, field errors, and ErrorCard titles use `--q1-color-red-900`; other status text retains its existing semantic text token.
 
-`--q1-color-focus` is neutral black in light mode and white in dark mode. `--q1-shadow-focus` and `--q1-shadow-focus-input` use a gapless 1px ring at 34% plus a 4px halo at 16%. Buttons and inputs consume this recipe; input focus preserves the resting border, without an active-border swap or inset stroke. `--q1-input-border-focus` remains an opt-in override and defaults to the resting input border. Invalid inputs retain their danger border; `--q1-shadow-focus-input-danger` and `--q1-shadow-focus-danger` use the same 1px / 4px geometry with danger color at 34% / 16%. Text links retain the 3px neutral focus underline. Forced colors and high contrast retain visible system outlines.
+`--q1-color-focus` is neutral black in light mode and white in dark mode. The shared `--q1-shadow-focus` and `--q1-shadow-focus-danger` remain unchanged: both keep a gapless 1px ring at 34% plus a 4px halo at 16%, using focus and danger color respectively. Inputs already have a real border, so `--q1-shadow-focus-input` omits the 1px shadow and uses only the 4px halo at 16%; focus preserves the resting border color, without an active-border swap or inset stroke. `--q1-input-border-focus` remains an opt-in override and defaults to the resting input border. Invalid inputs retain their danger border; `--q1-shadow-focus-input-danger` uses the same single 4px halo at 16% in danger color. Text links retain the 3px neutral focus underline. Forced colors and high contrast retain visible system outlines.
 
-Migration: `--q1-color-bg-panel` remains `#ffffff` in light mode and changes from `#0a0a0a` to `#1a1a1a` in dark mode. The dark canvas, raised surface, and overlay now use `#121212`, `#222222`, and `#2b2b2b`. Downstream overrides that manually raised panel or overlay backgrounds should be reviewed. The 2026-10-05 owner-approved focus change replaces the brand ring and inset input stroke with the neutral 1px / 4px recipe and preserves resting input borders. Consumers with custom focus visuals should update their screenshots and forced-colors fallback. The unused `--q1-shadow-card` name is removed before release.
+Migration: `--q1-color-bg-panel` remains `#ffffff` in light mode and changes from `#0a0a0a` to `#1a1a1a` in dark mode. The dark canvas, raised surface, and overlay now use `#121212`, `#222222`, and `#2b2b2b`. Downstream overrides that manually raised panel or overlay backgrounds should be reviewed. The 2026-10-05 owner-approved focus change replaced the brand ring and inset input stroke with the neutral 1px / 4px recipe. Issue #835 revises its input portion to one 4px halo at 16%, preserving real borders and their resting colors; the shared focus recipe stays unchanged. Consumers with custom focus visuals should update their screenshots and forced-colors fallback. The unused `--q1-shadow-card` name is removed before release.
 
 Owner-approved contrast roles (2026-10-07): `--q1-color-border-control` is the resting form-control boundary (light uses `gray-700`, about 3.23:1 on white, since the 2026-10-13 owner decision; dark uses `gray-600`); controls with a strong light border retain that value and opt into this role only in dark mode. Decorative borders retain `border` / `border-strong`. Dark `--q1-color-border-strong` moves from `gray-400` to `gray-500` (2026-10-13) so selected and emphasized outlines stay distinguishable from the default `border`. `--q1-color-accent-graphic` is for brand-colored non-text graphics (light `primary-700`, dark `primary-900`), independent of button action colors. Slider dark unfilled tracks use `gray-500`.
 

package/dist-pkg/component-enums.json

@@ -91,6 +91,20 @@
       "lg"
     ]
   },
+  "FileInput": {
+    "variant": [
+      "primary",
+      "secondary",
+      "ghost",
+      "warning",
+      "danger"
+    ],
+    "size": [
+      "sm",
+      "md",
+      "lg"
+    ]
+  },
   "FilterChip": {
     "size": [
       "sm",

package/dist-pkg/design-system.d.ts

@@ -151,20 +151,31 @@ export declare type BadgeTone = 'neutral' | 'info' | 'success' | 'warning' | 'da
 
 export declare function Banner({ title, children, tone, icon, action, onDismiss, progress, className, ...rest }: BannerProps): JSX.Element;
 
+export declare type BannerAction = {
+    label: string;
+    href: string;
+    onClick?: never;
+    loading?: never;
+    disabled?: never;
+} | {
+    label: string;
+    href?: never;
+    onClick: NonNullable<ButtonProps['onClick']>;
+    loading?: ButtonProps['loading'];
+    disabled?: ButtonProps['disabled'];
+};
+
 export declare type BannerProps = {
     /** 粗体导语，一眼点题。 */
     title: string;
-    /** 描述文案；组件统一用「 — 」与导语衔接。 */
+    /** 段落内文本或行内内容，可放 Link；组件统一用「 — 」与导语衔接。 */
     children?: ReactNode;
     /** 未设 = 页顶公告形态；设值 = 页内卡条形态（neutral 为中性卡条）。 */
     tone?: BannerTone;
     /** 卡条形态的前缀图标；纯装饰（组件自动 aria-hidden）。公告形态与进度形态不渲染图标。 */
     icon?: ReactNode;
-    /** 主操作：公告形态渲染恒深药丸（无 chevron）；卡条形态渲染描边药丸 + chevron。进度形态忽略 action——任务进行中不挂主跳转，完成后换普通卡条。 */
-    action?: {
-        label: string;
-        href: string;
-    };
+    /** 主操作链接或按钮；按钮复用 Button 的 loading / disabled。进度形态忽略 action。 */
+    action?: BannerAction;
     /** 关闭回调；设置后渲染关闭按钮。公告形态无关闭；进度形态渲染在进度头右侧。 */
     onDismiss?: () => void;
     /** 进度形态（自有扩展）：value 为 0–100 的百分比（非法值归 0），label 供读屏。进度恒为卡条形态。 */
@@ -1107,11 +1118,13 @@ export declare type EmptyListIllustrationProps = {
     variant?: 'complete' | 'neutral';
 };
 
-export declare type EmptyListIllustrationScene = 'list' | 'search' | 'complete' | 'chart' | 'inventory' | 'orders' | 'product' | 'permission';
+export declare type EmptyListIllustrationScene = 'list' | 'search' | 'complete' | 'chart' | 'inventory' | 'orders' | 'product' | 'permission' | 'purchase' | 'supplier' | 'team' | 'notification' | 'store' | 'task' | 'session' | 'activity';
 
-export declare function EmptyState({ icon, illustration, title, description, actions, headingLevel, layout, }: {
+export declare function EmptyState({ icon, illustration, title, titleHidden, description, actions, headingLevel, layout, }: {
     icon?: ReactNode;
     title: string;
+    /** 仅视觉隐藏标题，保留原标签与可访问文本。 */
+    titleHidden?: boolean;
 } & ({
     layout?: 'center';
     illustration?: ReactNode;
@@ -1122,7 +1135,7 @@ export declare function EmptyState({ icon, illustration, title, description, act
     headingLevel?: 2 | 3 | 4 | 5 | 6;
 } | {
     layout: 'inline';
-    illustration?: never;
+    illustration?: ReactNode;
     description?: never;
     actions?: never;
     headingLevel?: never;
@@ -1230,6 +1243,14 @@ declare type FieldShellProps = {
 
 export declare type FieldSize = 'xs' | 'sm' | 'md' | 'lg';
 
+export declare function FileInput({ name, accept, multiple, required, disabled, onChange, ref, id, className, buttonLabel, variant, size, ...rest }: FileInputProps): JSX.Element;
+
+export declare type FileInputProps = Omit<ComponentPropsWithRef<'input'>, 'type' | 'value' | 'defaultValue' | 'children' | 'size'> & {
+    buttonLabel?: ReactNode;
+    variant?: ButtonVariant;
+    size?: ButtonSize;
+};
+
 export declare function FileTree({ nodes, label, defaultExpanded, }: {
     nodes: FileTreeNode[];
     label?: string;
@@ -2569,6 +2590,18 @@ export declare type StatusPageProps = {
     headingLevel?: 1 | 2 | 3 | 4 | 5 | 6;
 };
 
+export declare function Stepper({ steps, current, className, ...rest }: StepperProps): JSX.Element;
+
+export declare type StepperProps = Omit<ComponentPropsWithoutRef<'ol'>, 'children'> & {
+    steps: StepperStep[];
+    current: number;
+};
+
+export declare type StepperStep = {
+    label: ReactNode;
+    description?: ReactNode;
+};
+
 export declare function Switch({ options, ariaLabel, name, defaultValue, value, onChange, size, variant, fullWidth, iconOnly, }: {
     options: SwitchOption[];
     ariaLabel: string;
@@ -2669,16 +2702,24 @@ export declare type TableRowRenderContext<T> = {
     rowKey: TableRowKey;
     rowProps: TableHTMLAttributes<HTMLTableRowElement>;
     cells: ReactNode;
+    selectionCell: ReactNode | null;
 };
 
 export declare type TableSelection<T> = {
     selectedKeys: readonly TableRowKey[];
-    onSelectionChange: (selectedKeys: TableRowKey[]) => void;
+    onSelectionChange: (selectedKeys: TableRowKey[], details: TableSelectionChangeDetails) => void;
     getRowLabel: (row: T, rowIndex: number) => string;
     getRowDisabled?: (row: T, rowIndex: number) => boolean;
     selectAllLabel?: string;
 };
 
+export declare type TableSelectionChangeDetails = {
+    type: 'row' | 'page';
+    rowKey?: TableRowKey;
+    checked: boolean;
+    shiftKey: boolean;
+};
+
 export declare type TableSortDirection = 'asc' | 'desc';
 
 export declare function Tabs({ tabs, ariaLabel, variant, value, defaultValue, onValueChange, }: {