@quillmark/wasm 0.94.0 → 0.96.0

package/CHANGELOG.md

@@ -1,324 +1,71 @@
 # Changelog
 
-## v0.94.0 - 2026-07-15
-
-- Delete prose/plans directory
-- feat(wasm): promote the live-session/canvas surface to stable
-- docs(release): reconcile changelog and guides for 0.94.0 (skip 0.93)
-- test(core,quillmark): remove redundant and low-value tests
-- core: drop public→private rustdoc link in UiFieldSchema docs
-- core/seed: collapse merge-then-sort into one declaration-order pass
-- docs: declaration order is the field ordering contract; ui.order removed
-- core, bindings: update tests, golden, and doc surfaces for structural order
-- core: field declaration order becomes structural (IndexMap), ui.order retired
-- Simplify group-order sort key and ui.order stamping
-- Add card-level ui.groups registry for group identity and ordering
-- pdfform: place widget geometry once at bind, not per render
-- pdfform: gate form.json version before field-shape parse
-- pdfform: derive widget intrinsics from the quill schema (form@0.2.0, #940)
-- Reject nested ui.group; auto-order nested object properties
-- docs: densify the plaintext/enum section of the 0.93->0.94 guide
-- core, richtext: follow simplification cascades from plaintext
-- docs: extend canon (BLUEPRINT, PLATE_DATA) for plaintext and enum
-- docs: document plaintext and enum field types, narrow string
-- quillmark: end-to-end render test for plaintext through typst
-- core: test plaintext codec and enum promotion end-to-end
-- core: add plaintext and enum first-class field types
-- richtext: add from_plaintext literal codec and is_plain predicate
-- fix(typst/overlay): stop underline/strike decoration ink truncating $body regions
-- chore: migrate org references quillmark-org → borb-sh
-- docs: fix cross-tree link that broke mkdocs --strict
-- simplify: fix stale receiver refs and facade-prose misses after rename
-- rename typed-write facade editor→writer; unify on quill.writer(doc)
-- python: delete redundant commit_* verbs (subsumed by the editor)
-- docs: two-tier binding surface — parity table + strata/ephemerality (#932)
-- python: Document.editor(quill) front door + Editor/CardEditor + reads
-- wasm: quill.editor(doc) front door + tier-1 gap verbs + reads
-- wasm+python: delete addressed commit(addr) verb (subsumed by editor)
-- core: TypedEditor set_body + add_card (tier-1 mirror verbs)
-- simplify: follow the #925 cascades
-- docs: finish migration index entry; tidy wasm doc link
-- python: mirrored addressed write surface + corpus codec
-- wasm: addressed write surface (install/revise/applyChange/commit) + codec
-- richtext+core: pure Delta codec + install/revise body & field verbs
-- test(wasm): update runtime.test.js editor sugar to the strict contract
-- feat(core,wasm,python)!: typed field writes reject unknown names (#918)
-- wasm: split Card read type from CardInput write type (#917)
-- richtext: MarkOp::Remove subtracts the range instead of dropping the whole mark
-- fix(quillmark-pdf): dict/array depth walkers skip comments and strings
-- fix(richtext): markdown export never leaks a delimiter into the corpus
-- fix(richtext): saturate ordered-list marker; doc/hint cleanups from final review
-- #913: mirror the WASM typed batch on Python (commit_fields + set/commit reframe)
-- #911: finish exposing the typed editor in WASM (commitFields batch + JS editor sugar + reframe)
-- test(wasm): warm the lazy Typst backend load before timed Engine renders
-- test: consolidate generator-arm round-trips and costume proptests (tier 3-4)
-- test: remove orphan fixtures and redundant/low-value tests (tier 1-2)
-- docs: audit of legacy/redundant/low-value tests, fixtures, logic
-- richtext/core/bindings: address issues #902–#906
-- richtext: escape image alt/URL and link URL on markdown export (#900)
-- richtext: strip \r and bidi controls from apply_text_delta inserts
-- Remove prose/proposals/: 893 proposal has landed
-- Unify binding write-verb grammar: mechanical card-write twins (#895)
-- Hard cutover to commit_field: remove legacy richtext writers
-- wip: bindings + tests + docs for typed writes (pre-cutover)
-- Typed field writes: conform dispatch, commit_field, TypedEditor (core)
-- Review typed-field-writes proposal against codebase; resolve open questions
-- Add proposal: typed field writes via schema-carried types (#893)
-- feat(wasm): setCardBody — corpus writer for a non-main card body (#892)
-- remove(core,richtext,wasm)!: delete the incremental-edit surface (#886)
-- test(wasm): fix two applyFieldDelta tests left stale by the #881 un-gate
-- feat(regions): field_boxes helper + CorpusHit granularity signal (#884)
-- fix(core,wasm): resolve lint CI failure + re-sync applyFieldDelta type after merge
-- wasm/canvas: report clamp on PaintResult; document paint compositing constraints
-- fix(wasm): make applyFieldDelta and supportsCanvas types honest about their domain
-- docs: migration guide for the richtext field write-surface unification (#881)
-- richtext: un-gate applyFieldDelta to richtext fields (step 6)
-- wasm: setRichtextField / updateCardRichtextField + per-field markdown getter (step 5)
-- richtext: emit projects corpus fields to markdown; wire/DTO lossless (steps 2-4)
-- richtext: Card::set_field_richtext writer + corpus read-back (step 1)
-- fixtures: table_demo Quill + end-to-end table render test; document pdfform limit
-- richtext: property-test structured tables through normalize + round-trip
-- richtext: in-cell images degrade honestly instead of silent-Lossless
-- richtext: canonical table shape — validate invariants, repair in normalize
-- test: drop two redundant inline tests; dense-prose the runtime edit-surface note
-- Prune landed simplification entries from the backlog
-- Silence clippy nits in span_scan walk refactor
-- test(wasm): keep runtime edit-surface guard focused on the #876 methods
-- docs: fix rustdoc intra-doc links to satisfy the -Dwarnings lint gate
-- Filter locate's glyph walk to the target segment
-- Share frame-walk geometry between region scan and corpus walk
-- feat(wasm): expose incremental editor edit surface through runtime (#876)
-- Skip props re-clone in normalize when already key-sorted; document R2 hazard
-- Carry the <u>/Strong distinction instead of re-sniffing source
-- feat(typst): add plaintext(field) projection helper + document richtext migration hazard (#873)
-- Lift island mark-dispatch out of model into serial
-- Build canonical richtext tree once via move-based key sort
-- feat(wasm): add setBody(corpus) mutator on Document (#874)
-- Dedup emit_inline mark partition into wraps_and_codes
-- fix(typst): lower richtext(inline) fields to inline content (#872); fix wasm TS types (#875)
-- Remove unused ChangeLog/session forward surface
-- Cut over-engineered simplification findings; refresh drifted citations
-- docs(simplifications): remove the addressed findings
-- docs(simplifications): record the sync-twins deferral rationale
-- refactor(typst,richtext): dedup container dispatch and the #846 clip
-- refactor(core): one shared decoder for the dual-shape richtext seam
-- refactor(richtext): make apply_field_change all-or-nothing
-- refactor(core): single carrier for the richtext inline flag
-- refactor(richtext): drop unused usv UTF-16 helpers and content_key alias
-- refactor: apply low-risk simplifications from prose/simplifications
-- docs: record simplification-review findings in prose/simplifications/
-- fix(richtext): apply a short field delta leniently (auto-append remainder)
-- Trim unused test-only public methods from core
-- docs(core,typst): dense-prose pass on comments
-- docs(richtext): dense-prose pass on comments
-- docs(core): update QuillValue fill-setter reference after set_fill removal
-- Remove more dead/redundant logic
-- docs: remove stale info across canon, docs, and comments
-- test: remove redundant and low-value tests across the workspace
-- Remove dead and redundant logic
-- fix(docs): resolve broken intra-doc links (cargo doc -Dwarnings)
-- typst/richtext: address #855 cleanup findings
-- Fix #851 follow-up: transactional applyFieldDelta and fail-closed invalidation
-- richtext: fix issue #854 cleanup findings
-- fix(session): close the three delta-protocol lifecycle gaps (#851)
-- Fix low-risk API-surface findings from #856
-- fix(wasm): strip unreachable delta-API types from public runtime.d.ts (#850)
-- chore: ignore dist/, .vite/, test-results/ to prevent build-artifact commits
-- fix(richtext): cap single-line char diff to avoid quadratic blowup (#849)
-- fix(richtext): balance markdown export for overlap, escape `&` and trailing heading `#` (#848)
-- docs: fix richtext drift found in #853
-- fix(richtext): keep islands in sync on text-channel edits (#847)
-- fix(typst): balance markup for overlapping wrap+code marks (#846)
-- Render thematic breaks (---/***/___) instead of dropping them
-- fix(richtext): correct ChangeLog::map_pos staleness and future-revision handling
-- chore(richtext): drop richtext-spikes from integration branch
-- Move richtext inline shape to `inline: true` schema field.
-- feat(richtext): PR-H findings — fixture, runtime nav, docs (PR-H)
-- cargo fmt
-- feat(richtext): preview revision stamp + WASM session delta API (PR-F/PR-G)
-- feat(richtext): fallible document body mutators (PR-E)
-- docs(richtext): drop .qmd and Quill-Delta from phase-3 plan
-- docs(richtext): record PR-C/D landing in phase-3 plan
-- feat(richtext): add mark/line op channels and apply bundle (PR-D)
-- feat(richtext): add revision counter and bounded change log (PR-C)
-- feat(richtext): replace coarse delta::diff with Myers/LCS (PR-B)
-- Remove husky pre-commit hook
-- cargo fmt
-- docs(richtext): record phase-3 spike findings on integration branch
-- docs(richtext): align canon + code comments to PR-G, wrap up phase 2
-- fix(wasm): add span to canonical FieldRegion contract
-- richtext PR-G: richtext(inline), load-time example cache, alias cutover
-- Delete prose/review directory
-- docs(richtext): trim phase plans to landed reality, fold spike findings
-- test(richtext): wasm binding test for positionAt/locate round-trip (#829)
-- PR-F: regions + navigation — two-tier segment scan, position_at/locate (#829)
-- spike(richtext): PR-F de-risking — run-machine transparency + glyph.span.1 precision
-- fix(richtext): accept bodyMarkdown in the wasm card field allowlist
-- feat(richtext): phase-2 PR-E — bindings expose corpus body + bodyMarkdown
-- docs(richtext): clarify hard vs soft break in the CONVERT lowering table
-- docs(richtext): phase-2 PR-E canon rework for the corpus seam
-- feat(richtext): phase-2 PR-E — pdfform lowers richtext to plaintext + fixture
-- feat(richtext): phase-2 PR-E part 2 — delete the markdown oracle
-- feat(richtext): phase-2 PR-E part 1 — seam flip + typst consumes corpus
-- docs(richtext): reconcile Typst-emit section with structured cells
-- docs(richtext): PR-E handover + phase-2 status refresh
-- docs(richtext): remove the .qmd file-extension concept
-- feat(richtext): structured table cells — markdown a pure projection
-- feat(richtext): phase-2 PR-D — typst corpus emitter + segment source maps
-- feat(richtext): phase-2 PR-C — storage cutover to quillmark/document@0.93.0
-- fix(richtext): resolve broken RichText::validate intra-doc link
-- fix(core): quote payload scalars that would re-parse as a non-string
-- docs(richtext): PR-B landing log + PR-C handover on the phase-2 plan
-- fix(richtext): clear rustdoc -Dwarnings lint on phase-2 PR-B docs
-- test(bindings): update body expectations for corpus canonicalization
-- feat(richtext): phase-2 PR-B — Card.body is RichText, markdown a projection
-- docs(richtext): lock separate-crate topology + retire Quill-Delta framing in plan
-- refactor(richtext): make quillmark-richtext a leaf crate core depends on
-- docs(richtext): phase-2 plan — engine consumes RichText, delivers #829
-- docs(richtext): note block-quote emit decision for phase-2 handover
-- docs(richtext): phase-1 handover doc + integration HQ updates
-- fix(richtext): address phase-1 review — freeze determinism, codecs, anchors
-- feat(richtext): phase 1 — RichText corpus model, codecs, canonical serialization
-- docs(richtext): land phase-0 spike findings on the integration HQ
-- docs(richtext): make integration HQ canonical, self-contained
-- docs(richtext): open integration HQ plan for the content-model rework
-- Sync usaf_memo/0.2.0 fixture with airmark-quiver template
-- #824: dedup bindings tests + add two coverage guards
-- #823 items 2-9: dedup core + integration tests
-- #821 follow-up: fix rustdoc private-intra-doc-link in winansi_encode
-- #822: dedup typst backend + PDF crate tests (~280 lines)
-- #825: cache only the wasm cargo build dir, always regenerate pkg/
-- #806: resolve overlapping widget field_at by paint order, not name
-- Dead-code sweep from minimize-0.92.1-main review (#817–#821, #823, #825)
-- Ground #809/#810: memoize page checks, unify dict-splice + field-name filters (#816)
-- Tidy deferred backlog: dedup error-summary, pdfform flatten-limit docs, cleanup (#804, #807, #810, #812) (#815)
-- Fix silent-data-loss regression and blueprint/error/docs gaps (#803, #805, #808, #811) (#814)
-- Land LiveSession.fieldAt delegation; harden page_hashes against source spans (#801) (#813)
-- Helper codegen v2: markup blocks + generated data literal, retiring eval() and json() (#800)
-- Disable clippy in lint CI job (#798)
-- Satisfy clippy's manual_contains in the scalar-window walker
-- Drop the #797 spike modules from the branch
-- Harden the span scan against the review findings
-- Delete .claude/skills/simplification-cascades directory
-- Spike: generated data literal is Typst-equal to the json() blob
-- Spike: content fields as markup blocks resolve with per-node spans
-- Document the span-based region contract across canon, core, and the migration guide
-- Expose fieldAt on the WASM session; align binding docs with the span contract
-- Migrate usaf_memo off tagged(); rewrite region tests for the span contract
-- Span-based region tracking: codegen'd eval windows + glyph-span scan
-- Omit $body from the transform schema for body-disabled kinds
-- feat(regions): any array is element-addressable; SchemaMeta drops its unreachable Option
-- test(typst): own the widget-region test's schema instead of borrowing the fixture's
-- refactor(typst): collapse SchemaMeta per-kind table boilerplate, test-owned widget width
-- docs(migrations): document the compile-time region-binding validation in the working guide
-- fix(ci): hash every pkg/ input in the wasm cache key, check key sets in the drift guard
-- fix(wasm): sync canonical runtime.d.ts with the regions sidecar, wire typecheck into CI
-- feat(regions): validate form-field paths, reject scalar index-tagging, cache schema meta
-- docs(migrations): fix stale region-uniqueness line in 0.92→0.93 guide
-- Reconcile canon and migration guide with the reworked error system
-- Update binding surfaces to the current-compile warnings contract
-- Thread Typst compile warnings through the session as current-compile state
-- Collapse RenderError to a single diagnostics-carrying struct; drop Severity::Note
-- Amend error-rework proposal per adversarial review
-- Propose error system rework: one failure type, warnings on the compile seam
-- dense-prose: drop issue reference and history narration from regions test
-- feat(regions): tag the usaf_memo plate; canon + migration guide for the new region contract
-- feat(regions): per-placement regions, public tagged() helper, one-shot sidecar
-- docs: accuracy pass + dense-prose sweep across docs/, prose/canon/, comments, READMEs
-- build-wasm.sh: dev builds stamp next-patch -dev.<sha>, releases stamp verbatim
-- wasm runtime: snapshot caller handles before the first await
-- ci: enable the Clippy lint gate
-- Python: batched-error message embeds the first diagnostic
-- docs(core): note apply's $quill-check boundary on LiveSession::apply (#778)
-- perf(wasm): LiveSession retains QuillConfig, not the whole Quill (#778)
-- docs: canonize LiveSession — live preview owns apply/ChangeSet (#778)
-- feat(wasm): LiveSession.apply(doc) -> ChangeSet (#778)
-- Canon: endorse programmatic document construction
-- refactor!: collapse RenderSession into LiveSession (#778)
-- Add blank-canvas Document constructor in core and all bindings
-- feat: transactional apply() + ChangeSet on the render session (#778)
-- Add scalar From impls for QuillValue; mutators take Into<QuillValue>
-- Expose batched set_fields across Python, WASM, and .NET bindings
-- feat(typst): persist the World in the session; evict comemo after each compile (#778)
-- Add atomic batched Card::set_fields
-- remove(dotnet)!: drop the .NET binding entirely
-- Update README.md
-- Update README.md
-- Update README.md
-- Update README.md
-- Update README.md
-- Update README.md
-- Update README.md
-- fix: update WASM region test for content auto-tag; fix doc links
-- docs(region): tighten regions() doc per dense-prose
-- feat(region): one region per logical schema field
-- docs(region): fix grouping guidance and note blank/empty no-region case
-- refactor(typst): expose a region only for schema-addressable fields
-- feat(typst): auto-region tagging for content fields (#775)
-- refactor(core)!: move field regions from RenderResult to RenderSession::regions()
-- refactor(core)!: key regions on the quill schema field, not the backend widget
-- docs: fold prune-evolutionary-info into dense-prose
-- docs: canonize comment/doc style as the dense-prose skill
-- refactor(test): drop dangling BACKLOG.md reference
-- refactor(core): tighten doc-comments, prune evolutionary phrasing
-- refactor(bindings): neutralize marketing and reframe legacy phrasing
-- refactor(quillmark,cli,fuzz): tighten comments, drop bug-history narration
-- refactor(typst): tighten module and item doc-comments
-- docs(canon): prune evolutionary and marketing phrasing
-- docs: neutralize marketing and reframe legacy aliases in consumer docs
-- feat(pdfform): export PNG and SVG; remove the preview feature gate
-- fix(ci): resolve lint and docs CI failures on pdfform branch
-- fix(quillmark-pdf): make find_dict_value key/value-position aware
-- Make the plate a Typst-backend concern, not a universal one
-- Address branch-review findings: spine robustness, coercion parity, doc accuracy
-- Prune resolved review items 01–06; trim 07 to remaining gaps
-- Rework item 2: derive canvas capability, delete supports_canvas flag
-- Address branch-review item 3: total FieldRegion round-trip
-- Address branch-review items 1, 2, 4, 5, 6, 7
-- docs(review): write up unaddressed branch-review items for discussion
-- test(pdfform): restore flatten byte-level coverage at the unit level (preview-gated)
-- refactor(pdfform): PDF output always AcroForm; remove the public flatten knob
-- Update sample_form PDF title and field labels
-- Make pdfform framing industry-neutral
-- docs: add PDF Form backend page under quills section
-- refactor(pdfform): remove the form.json -> Quill.yaml scaffold
-- refactor(pdf): extract the incremental-update envelope into PdfUpdate
-- pdfform: WinAnsi flatten encoding, value clipping, shared PDF writer
-- review: resolve low-risk findings from pdfform branch review
-- Update README.md
-- Remove qualification layer and page composition: pdfform fills static forms only
-- feat(quillmark-pdf): page-merge primitive + continuation foundation (#757)
-- refactor(pdfform): centralize flatten value typography as one source of truth (#752)
-- feat(wasm): ship pdfform canvas + make the per-backend canvas contract explicit (#755)
-- feat(typst): generalize the plate API to arbitrary form-field(...) (#758)
-- feat(pdfform): card-instance value addressing in the resolver (#757)
-- feat(qualify): add quillmark-qualify — AcroForm PDF → form.pdf + form.json (#753)
-- chore(fmt): apply rustfmt line-wrapping to pre-existing drift
-- feat(pdfform,cli): scaffold Quill.yaml from a form.json field spec (#756)
-- fix(pdfform): build the preview feature against hayro's vello_cpu re-export
-- Expose form-field regions from stamped AcroForm backends (#759)
-- Implement `pdfform` backend + shared `quillmark-pdf` stamping spine (V1) (#750)
-- docs(proposal): design for pdfform backend + shared AcroForm spine (#744) (#748)
-- fix(python): count container levels, not the scalar leaf, in depth bound (#742) (#746)
-- Add generic hint for unresolvable Typst eval errors (issue #745) (#747)
-- docs: fix prose/canon, docs, and code-comment consistency drift (#743)
-- fix(core): count empty containers in json_depth_exceeds (#741)
-- Update README.md
-- docs: position Quillmark as a "schema-driven document engine" (#739) (#740)
-- review(0.93.0): fix stale comments, document scalar coercion, cover card markers (#738)
-- Unify blueprint emission on Document::to_markdown (#737)
-- docs(blueprint): fix $-line comment inaccuracies in canon (#735)
-- core: graciously coerce bare scalars into string fields (#733)
-- docs(spike): propose unifying blueprint placeholder on the !must_fill tag (#732)
-
-
-## v0.92.1 - 2026-06-22
-
-- Accept uppercase field names; reserve only `$`-prefixed keys (#730)
-- docs: canonize $ext.editor.title as per-card display name slot (#729)
+## v0.96.0 - 2026-07-23
+
+- docs(spec): keep plate JSON out of the markdown spec
+- docs(core): fix doc-lint and mkdocs-strict CI failures
+- core: gate plate $body at construction, not post-hoc strip
+- docs(core): trim duplicated $kind comment in to_plate_json
+- core: plate $body/$kind absent on undefined (#1030)
+- core: compile_data conforms once — ladder consumes the gate's coerced output
+- rename: view()→reader(), fieldStates()→resolve() across core and bindings
+- core: one shared resolver behind compile_data and field_states
+- content: dense-prose + simplify pass on the #1002 decision
+- content: decide island-id ↔ content-hash determinism (#1002)
+- Re-key runtime.d.ts geometry docs onto the canonical DocPath form
+- Canon lint cleanup: dedup spine restatements, fold CI job, shape-based anchor check
+- Canon docs infra: single-source the spine in prose/README.md, enforce in CI
+- release: strip the seed coverage comment by construction; fix blank-notes fallback
+- Reject signed years in date/datetime grammar (#1008)
+- core: silence unused_must_use on Payload::insert in tests
+- DocPath: root every main-field address at `main`
+- fieldStates: ordered rows carrying `name`, body as a sibling (drop `$body`)
+- Descope phase 5: cut the conformance suite, contractVersion, and phase-plan docs
+- Contract phase 5 — conformance suite + contractVersion
+- Contract phase 4 — typed-surface completion: QuillCardUi.groups + island props
+- Phase 3 doc: separate tested value-parity from structural source-rung claim
+- Fix rustdoc intra-doc links on EditError::doc_path / RenderedRegion.field
+- simplify pass: hoist kinds vec, unify render-sidecar addressing, merge doc_path arms
+- Contract phases 2–3: geometry DocPath unification, mutator paths, lean fieldStates
+- Repivot the contract rework around consumer evidence (phase-doc rewrite)
+- Qualify card fill diagnostics by schema-declared kind only (#1014)
+- Contract phase 2 — canonical DocPath (+ phase 1 wasm test fix) (#1012)
+- edit:: diagnostic codes on mutator failures (contract phase 1) (#1006)
+- Add document-contract rework phase plan (#1005)
+- content: centralize island type dispatch behind KnownIslandType (#985) (#1001)
+
+
+## v0.95.1 - 2026-07-19
+
+
+
+## v0.95.0 - 2026-07-19
+
+- release: re-cut to finish binding dists after the first publish run cancelled mid-flight
+- **breaking** typst: a present `date` / `datetime` field lowers to a click-to-edit value-object — `(value: datetime(..), display: (..args) => text(value.display(..args)))` — instead of a bare Typst `datetime`, so the rendered glyphs are born at a generated `text(..)` node carrying a region keyed on the field's schema path: a date placed by a vendored package, or a card's date riding a shared loop variable, is click-to-edit. A blank date stays `none`, so `!= none` guards hold. Plates migrate two shapes: `(data.f.display)("…")` (paren form — the stored `display` is a closure on a dict, not a method) and `data.f.value` for anything native (comparison, `.year()`-family components, datetime-consuming packages). The tonguetoquill flagship quills' `display-date` dispatches on `type(date)`, since their `datetime.today()` blank-date fallback stays a native datetime (#990)
+- **breaking** core,typst,pdfform: split the `datetime` field type into strict `date` and `datetime` (#717/#799 resolved) — `date` accepts a bare `YYYY-MM-DD` and rejects any time component; `datetime` accepts offset-less wall-clock `YYYY-MM-DDThh:mm[:ss]` (seconds zero-filled) and rejects timezone offsets, the space separator, fractional seconds, and bare dates. Offsets are rejected, never dropped (the engine does no zone math); storage stays verbatim; no truncation in either direction. A `date` lowers to the three-component Typst `datetime(year:, month:, day:)` (unchanged emission) and a `datetime` to the six-component constructor, carrying the wall-clock time. The transform schema marks `date` as `format: "date"` (keeping `format: "date-time"` for `datetime`), and the blueprint reads `date<YYYY-MM-DD>` / `datetime<YYYY-MM-DDThh:mm[:ss]>`. Most deployed `datetime` fields hold a bare date and migrate to `type: date` with byte-identical data; the fixtures (usaf_memo, cmu_letter) do so. No deprecation alias — `datetime` rejecting a bare date is the decided end-state (#991)
+- **breaking** python: the binding commits to the typed lanes — field I/O flows through `quill.writer(doc)` / `quill.view(doc)` exclusively and `Document` is quill-free data and structure. Removed (WASM-only by scope, not lag — their audience is not a Python audience): the opaque field store (`store_field` / `store_fields` / `store_fill` and card twins), the content lane (`install` / `revise` / `apply_change`), the quill-free field reads (`get` / `get_card_field`), and the module codec fns (`import_markdown` / `export_markdown` / `rebase` / `map_pos`). The composable `$ext` / field-remove card twins fold onto a trailing `card=None` selector and `push_card` folds into `insert_card(card, at=None)`. Mirrored additions: `writer.revise_field` (the `Delta` receipt is not surfaced), `writer.add_card(kind, fields=None, body=None, at=None)`, `writer.card(i).kind`, and the `Writer` / `CardWriter` / `View` / `CardView` handle classes exported from the package (#970)
+- **breaking** core,wasm,python: complete the `RichText` → `Content` residual sweep (#976 folds into #982) — retire the last informal-`corpus` / model-`RichText` *identifiers* the mechanical rename missed: `CorpusHit` → `ContentHit`, `EditError::CorpusApply` → `EditError::ContentApply`, `RichtextDecodeError::NotCorpus` → `NotContent` (the codec-specific `RichtextDecodeError` type itself is kept), storage DTO `CanonicalRichText` → `CanonicalContent` (serde is unchanged — no wire migration), and the model-generic Typst emitter `emit_richtext` / `emit_richtext_inline` → `emit_content` / `emit_content_inline` (they lower any `Content`, richtext *or* plaintext). Also fixes the `ParseError` display strings `richtext json …` → `content json …`, the doubled-word find-replace debris (`content content model` → `content model`), and stale prose/comments across canon and rustdoc. Schema/codec names are untouched — `richtext` / `plaintext` tokens, `FieldType::{RichText,PlainText}`, `field_richtext` / `FieldRichtext*` / `apply_field_richtext_change`, `richtext(inline)` — they name codecs, not the model. "corpus" is purged from the tree entirely, including the ordinary-English test-set names that meant a *collection* of fixtures (`fixture_corpus` → `fixtures`, `synthetic_corpus` → `synthetic_inputs`) (#982)
+- **breaking** core,wasm,python: a schema-bound read view — `Quill::view(&doc)` / `quill.view(doc)`, the read twin of `quill.writer(doc)`. `view.get(addr)` interprets each field by its declared type (a `richtext` field → markdown, a `plaintext` field → its literal text via the plaintext codec, every other type → its canonical value verbatim), returns absent as `undefined` / `None`, and — the authority the quill-free `getMarkdown` lacks — throws `UnknownField` for a name the schema does not declare and `FieldRichtextDecode` for a content field holding an undecodable value. Core `TypedReader::get` returns a `ReadValue` (`Markdown`/`Plaintext`/`Value`); `view.card(i)` is the card cursor; core adds `Card::field_plaintext` (the `to_plaintext` twin of `field_markdown`). **`getMarkdown`'s field half retires**: `getMarkdown` / `get_markdown` / `get_card_markdown` are now body-only (WASM `getMarkdown` takes a `CardAddr`, a present `field` throws; Python drops the `name` parameter) — a field's markdown is read through `view.get`. The quill-free body projection stays on `Document` (#978)
+- **breaking** content: one delta-application contract — implicit trailing retain is `try_apply`'s semantics (a short delta retains the untouched remainder; the error is over-consumption only), `apply` panics on an over-long delta instead of clamping (clamping is silent corruption), and `extend_to_base` is removed. `split_line` / `join_line` rebase marks through their one-char `\n` splice with `map_pos` — the same mapping the text-delta channel uses — so marks no longer drift across line ops and `apply_field_change` canonicalizes once (a single terminal normalize instead of one per stage); line sync rebuilds in one forward pass instead of per-`\n` `Vec` splices. Mark ops are specified in final-text coordinates (post-delta, post-line-op — the frame they validate against) (#926, #987)
+- **breaking** core: storage blobs tagged `@0.81.0` / `@0.82.0` fail as an unknown schema version — the read-only `V0_81_0` / `V0_82_0` DTO trees and their forward migrations are retired (nothing persisted on this lineage predates `@0.92.0`; `0.82.0` was yanked). `V0_92_0` stays the oldest shape read, and its payload types back the current write path. DOCUMENT_STORAGE.md records variant retirement as the policy when no stored population remains (#929)
+- **breaking** core,wasm,python: the markdown projection stops appending a trailing newline — `to_markdown` projects a *value*, not a file, so `field_markdown` / `body_markdown` (WASM `getMarkdown` / `exportMarkdown`, Python `export_markdown` / `get_markdown`) no longer grow a `\n`; `writer.set("subject", "Hello")` reads back as `"Hello"`, not `"Hello\n"`. `.qmd` files still end in one newline (owned by `Document::to_markdown`, the file writer) and the content fixed point is unchanged (import is newline-insensitive) (#965)
+- **breaking** all: rename the content genus off its codec's name — crate `quillmark-richtext` → `quillmark-content`, type `RichText` → `Content` (and `RichTextLine`/`RichTextContainer`/`RichTextMark`/`RichTextIsland` → `ContentLine`/…), const `RICHTEXT_MEDIA_TYPE` → `CONTENT_MEDIA_TYPE` and its wire string `application/quillmark-richtext+json` → `application/quillmark-content+json`, `#[serde(skip)]` companion caches `FieldSchema::{default,example}_corpus` → `_content`, `SegmentMap.corpus: Range<usize>` → `.content`, Typst-emitter `EmittedContent` → `Emission` (it is markup + source map, not a Typst `content` value). Schema tokens `richtext` / `plaintext`, `FieldType::{RichText,PlainText}` variants, and the codec-specific `field_richtext` / `FieldRichtext*` / `apply_field_richtext_change` / `richtext(inline)` surface are unchanged — those name codecs, not the model. Canonical body JSON is nameless, so stored documents don't migrate; `contentMediaType` consumers pin to the new spelling. Retires the informal "corpus" noun to end the code/prose split (#976)
+- **breaking** core,wasm,python: `getMarkdown` / `get_markdown` / `get_card_markdown` stop conflating an absent field with a present-but-not-richtext one — a present field that does not decode as richtext (a scalar/array/object a `storeField` wrote) now throws `FieldRichtextDecode` instead of reading back `undefined` / `""`; absence still returns the absent shape. Core `Card::field_markdown` becomes `Option<Result<String, RichtextDecodeError>>` (the projection twin of `field_richtext`). Rule: absence returns, mismatch raises; read the raw value with `get` (#968)
+- feat(core,wasm): typed, anchor-preserving field revise — `TypedWriter::revise_field` / `CardWriter::revise_field` and `writer.reviseField` / `writer.card(i).reviseField` wrap core `Card::revise_field_checked` (diff-rebase surviving anchors, then schema-conform the result); the schema-bound verb lives on the writer, where the schema is (#957, #966)
+- **breaking** wasm: the quill-taking `Document` methods become the hidden ABI under the writer — `commitField` / `commitFields` / `addCard` → `_commitField` / `_commitFields` / `_addCard`, dropped from the `.d.ts`; remove `doc.reviseChecked` (no runtime consumer — use `writer.reviseField`). The visible `Document` class then carries zero quill-taking methods (#966)
+- **breaking** core: rename `EditError::BodyImport` → `EditError::Import` (message `body import failed:` → `markdown import failed:`) — the variant also fires on field-path imports (`revise_field`), where "body" misnamed it (#966)
+- **breaking** wasm: fold `pushCard` into `insertCard(card, at?)` — one insertion verb per lane, absent `at` appends; `insertCard`'s parameters reorder to `(card, at?)`. Delete the deprecated `replaceBody` alias (use `revise({}, md)` or `writer.setBody`) (#961)
+- feat(core,wasm): positioned card insert — `TypedWriter::add_card` / `writer.addCard` and the `addCard` ABI take an `at` position, so a positioned typed insert is one atomic call instead of `addCard` + `moveCard`; add `TypedWriter::remove_card` (mirrors JS `writer.removeCard`) and a JS `CardWriter.kind` getter (mirrors core `CardWriter::kind()`) (#961)
+- **breaking** core: `Payload::insert` / `insert_fill` now validate the field-name and value-depth invariant at the boundary and return `Result<_, FieldViolation>`, closing the `payload_mut().insert(...)` hole that let a direct caller build an invalid document; pre-validated internal callers use the new `pub(crate)` `insert_unchecked` / `insert_fill_unchecked` (#958)
+- feat(wasm,core): single-card reads — `doc.card(i)` (throws out of range), `doc.cardIndexById(id)` (first match; `$id` is non-unique), and `doc.seedOverlay(kind)`, backed by core `Document::card(i)` / `find_card(id)`. Reading one card, resolving a `$id`, or fetching a `$seed` overlay no longer serializes the whole `cards` array or main card (#956)
+- **breaking** core: parse warnings live only on `ParseOutput` — the redundant `Document::warnings` field + `warnings()` getter are dropped and `Document::from_main_and_cards` no longer takes a `warnings` param (`Document` `PartialEq` is now a plain derive) (#959)
+- **breaking** core: collapse the two parse functions into one entry — `Document::from_markdown` and `Document::from_markdown_with_warnings` are removed in favor of `Document::parse(md) -> Result<Parsed, ParseError>`, and `ParseOutput` is renamed `Parsed`. A document-only caller writes `parse(md)?.document`. Bindings are unaffected: WASM `Document.fromMarkdown` / Python `Document.from_markdown` keep their names and their `doc.warnings` getter (#964)
+- feat(wasm,python): keyed card reads `getCardField(index, name)` / `getCardMarkdown(index, name?)` (py `get_card_field` / `get_card_markdown`) — the card-indexed twins of `get` / `getMarkdown`, mirroring the `commitCardField` / `setCardField` write verbs so card reads no longer require a `payloadItems` walk (#953)
+- feat(content,wasm,python): `LineOp::SetContinues { line, continues }` — hard breaks lower op-wise. Split, join, and a text-delta `\n` all mint `continues: false` lines, so a within-block hard break (a paragraph hard break, a code fence's interior line) had no op and fell back to a whole-install, losing that edit's identity anchors. Threaded through the wire codec into WASM `applyChange` (TS union updated) and Python; `continues: true` on line 0 is rejected with `ApplyError::FirstLineContinues` before the write, leaving the content untouched (#949)
+- feat(wasm): the runtime root re-exports the edit vocabulary its own signatures reference — `Content` / `ContentLine` / `ContentContainer` / `ContentMark` / `ContentIsland`, `Addr` / `Delta` / `Assoc` / `LineOp` / `MarkOp` / `ChangeBundle`, `CardInput` / `PathStep` — as type-only exports (single entry point preserved; no `/core` subpath), with a presence guard so a dropped re-export fails `npm run typecheck` (#948)
 
-
-## Unreleased
+## v0.94.0 - 2026-07-15
 
 These notes cover everything since v0.92.1. No 0.93.x was separately
 published — the 0.93 milestone folds into this release, so the upgrade path
@@ -546,6 +293,12 @@ from 0.92.1 is the `0.92-to-0.93` and `0.93-to-0.94` guides read in sequence.
   `--features typst` where they used `--features render`; the published JS API is
   unchanged. See `docs/migrations/0.92-to-0.93.md`
 
+## v0.92.1 - 2026-06-22
+
+- Accept uppercase field names; reserve only `$`-prefixed keys (#730)
+- docs: canonize $ext.editor.title as per-card display name slot (#729)
+
+
 ## v0.92.0 - 2026-06-22
 
 - 0.92 technical-debt sweep: correctness, $seed hardening, de-duplication (#727)

package/README.md

@@ -89,7 +89,7 @@ is resolved at render time, not here. Loads no backend binary.
 A blank document: a main card carrying only `$quill`, an empty body, and no
 composable cards — the programmatic blank canvas. Absent fields resolve at
 render time (schema `default`, else type-empty zero), so nothing the caller
-did not set reaches the output. Build it up with `setFields` / `pushCard`.
+did not set reaches the output. Build it up with `storeFields` / `insertCard`.
 For an example-filled starter use `quill.seedDocument()`. Throws on an
 invalid quill reference.
 
@@ -197,7 +197,7 @@ and compare instead of re-parsing on every keystroke.
 ### `doc.cardCount`
 O(1) getter for the number of composable cards (excluding the main card).
 Use this to validate indices before calling card mutators (`removeCard`,
-`setCardField`, etc.) without allocating the full `cards` array.
+`storeField({ card, field }, …)`, etc.) without allocating the full `cards` array.
 
 ### `quill.validate(doc)`
 
@@ -233,47 +233,64 @@ const markdown = doc.toMarkdown();
 For per-card seeding, `quill.seedMain()` returns just the `$kind: main` card
 and `quill.seedCard(kind)` returns a starter composable card (or `undefined`
 if the kind is not declared). Both return the read `Card` shape of
-`doc.main` / `doc.cards`, which `doc.pushCard` / `doc.insertCard` accept
-directly:
+`doc.main` / `doc.cards`, which `doc.insertCard` accepts directly:
 
 ```ts
-doc.pushCard(quill.seedCard("note"));                 // seed → push
-doc.pushCard(Document.makeCard("note", { x: 1 }));    // build from a flat map
-doc.pushCard({ kind: "note", body: "Plain **markdown**." });  // bare inline
+doc.insertCard(quill.seedCard("note"));                 // seed → append
+doc.insertCard(Document.makeCard("note", { x: 1 }));    // build from a flat map
+doc.insertCard({ kind: "note", body: "Plain **markdown**." });  // bare inline
+doc.insertCard({ kind: "note" }, 0);                    // insert at index 0
 ```
 
 Reads and writes are two aligned shapes. A read `Card` always has `body:
-RichText` (canonical corpus, never a raw string) — no narrowing, no guessing
+Content` (canonical content, never a raw string) — no narrowing, no guessing
 whether the body was normalized. The write shape `CardInput` widens `body` to
-`RichText | string` (a markdown string imports to the corpus) and makes every
-field but `kind` optional. Every `Card` is a valid `CardInput`, so `pushCard` /
-`insertCard` still take exactly what `cards` / `removeCard` / `seedCard` return.
+`Content | string` (a markdown string imports to the content) and makes every
+field but `kind` optional. Every `Card` is a valid `CardInput`, so `insertCard`
+still takes exactly what `cards` / `removeCard` / `seedCard` return.
 Build a fresh card from a flat field map with
 `Document.makeCard(kind, fields?, body?)`.
 
-Batch mutation: `doc.setFields({...})` / `doc.setCardFields(index, {...})`
+**One address for the whole surface.** Reads and writes navigate by an `Addr` —
+`{ card?, field? }`, absent `card` = main, absent `field` = body — and a bare
+string is shorthand for `{ field }`. So `doc.storeField("qty", 3)` targets the
+main card's `qty`, `doc.storeField({ card: 2, field: "qty" }, 3)` a composable
+card's. Reads are total over the field axis (`get` → `undefined`, `isFill` → `false` for
+an absent field; only an out-of-range card throws); field writes throw on a body
+address. `getMarkdown` is the body markdown read (a `CardAddr`; a field's
+markdown is read through `quill.reader(doc).get(field)`). Card-scoped verbs take a
+`CardAddr` (`{ card? }`) first: `doc.getExt({ card: 2 })`, and the batch below.
+
+Batch mutation: `doc.storeFields({}, {...})` / `doc.storeFields({ card: index }, {...})`
 apply a whole object atomically — on any invalid field nothing is applied and
 the thrown error carries one diagnostic per offending field (`path` = field
-name).
-
-### Typed writes: `commit*` is the default, `set*` is the quill-free primitive
-
-A `Document` holds only a `$quill` *reference*, not the resolved schema, so it
-mutates through two layers:
-
-- **`commit*` — the schema-bound default whenever a quill is in hand.**
-  `doc.commitField(quill, name, value)` / `doc.commitFields(quill, {...})` (and
-  the `commitCard*` twins) resolve each field's schema `type`, coerce the value
-  to its canonical form (`"3"` → `3`, a markdown string → a richtext corpus),
-  and **fail now** on a mismatch instead of at render. A name the schema does
-  not declare throws `UnknownField` rather than falling to the opaque store — on
-  the typed path an undeclared name is a typo, not a fallback. The batch form is
-  all-or-nothing: an undeclared name aborts the whole write and its per-field
-  diagnostics name every offending field, so a whole-form submit surfaces every
-  typo `setFields` would silently absorb.
-
-- **`set*` — the deliberate quill-free primitive.** `doc.setField(name, value)`
-  / `doc.setFields({...})` (and the `setCard*` twins) validate only the field
+name). The address is first (never shape-overloaded, since `card` is a legal
+field name), and parses strictly — a stray key throws rather than silently
+reading as `{}`. The main card is `{}`, or **`MAIN_CARD_ADDR`** (from
+`@quillmark/wasm/runtime`), a frozen alias that spells the intent:
+`doc.storeFields(MAIN_CARD_ADDR, {...})`.
+
+### Typed writes: `commit*` is the default, `store*` is the quill-free primitive
+
+A `Document` holds only a `$quill` *reference*, not the resolved schema, so typed
+writes go through the schema-bound writer while the quill-free opaque store sits
+on `Document` itself (**store** = verbatim, **set** = typed):
+
+- **`quill.writer(doc)` — the typed door whenever a quill is in hand.** Bind the
+  schema once and issue bare `set` / `setAll` / `setBody` / `reviseField` /
+  `addCard` / `card(i)`. Each resolves the field's schema `type`, coerces the
+  value to its canonical form (`"3"` → `3`, a markdown string → a richtext
+  content), and **fails now** on a mismatch instead of at render. A name the schema
+  does not declare throws `UnknownField` rather than falling to the opaque store —
+  on the typed path an undeclared name is a typo, not a fallback. The batch form
+  (`setAll`) is all-or-nothing: an undeclared name aborts the whole write and its
+  per-field diagnostics name every offending field, so a whole-form submit
+  surfaces every typo `storeFields` would silently absorb. (The raw wasm class
+  carries the quill-taking `_commitField` / `_commitFields` / `_addCard` /
+  `_reviseField` ABI the writer delegates to, hidden from the `.d.ts`.)
+
+- **`store*` — the deliberate quill-free primitive.** `doc.storeField(addr, value)`
+  / `doc.storeFields(cardAddr, {...})` (and `storeFill`) validate only the field
   name/depth/kind and store the value verbatim, no quill required. Reach for it
   on purpose when you *want* the opaque store: quill-agnostic storage/migration
   infra that has no bundle and must write regardless of a drifted schema;
@@ -283,21 +300,20 @@ mutates through two layers:
   and only surfaces at `quill.validate` / render.
 
 Per-keystroke cost is the same either way (both mutate the in-memory `Document`
-in place; no seam is crossed), so steering to `commit*` buys the type check for
+in place; no seam is crossed), so steering to the writer buys the type check for
 free.
 
 #### `DocumentWriter` / `CardWriter` — bind the quill once
 
-The `commit*` verbs take the `quill` handle per call (the document carries no
-schema). When you hold both a quill and a document — a form editor, an MCP
-writer — bind them once with the writer sugar and issue bare verbs:
+`quill.writer(doc)` binds the quill's schema to the document once, so a form
+editor or MCP writer that holds both issues bare verbs (the writer forwards to
+the per-call `_commit*` ABI):
 
 ```ts
-import { DocumentWriter } from "@quillmark/wasm";
-
-const ed = new DocumentWriter(quill, doc);          // JS twin of Rust `quill.writer(doc)`
+const ed = quill.writer(doc);                       // Rust `quill.writer(doc)` twin; new DocumentWriter(quill, doc) also works
 ed.set("subject", "Q3 results");                    // strict-committed to the schema type
 ed.setAll({ qty: "3", subject: "Q3" });             // all-or-nothing batch
+ed.reviseField("subject", "Q3 **results**");        // typed AND anchor-preserving; returns a Delta
 ed.set("titel", "x");                               // throws UnknownField — a typo, not a fallback
 ed.card(2).set("body", "**note**");                 // composable card, resolved by its $kind
 ```
@@ -446,10 +462,11 @@ compilation failures. The same shape applies to every throw site:
 
 - `Document.fromMarkdown` — parse errors (missing root `$quill` metadata, YAML
   errors, `parse::input_too_large` for inputs > 10 MB).
-- `Document` mutators (`setField`, `setCardField`, etc.) — `EditError`
-  variants (`InvalidFieldName`, `InvalidKindName`, `ReservedKind`,
-  `IndexOutOfRange`, `ValueTooDeep`) appear in `diagnostics[0].message` with
-  the `[EditError::<Variant>]` prefix.
+- `Document` mutators (`storeField`, the writer's `set`, etc.) — mutator
+  failures carry a namespaced `edit::*` `code` on `diagnostics[0]`
+  (`edit::invalid_field_name`, `edit::unknown_field`, `edit::index_out_of_range`,
+  `edit::field_conform`, …). Route on `diagnostics[0].code`, never on message
+  text.
 - `engine.render` / `session.render` — backend compilation failures and
   validation errors.