rapier-html 1.1.99 → 1.1.102

package/BUILD.json

@@ -1,12 +1,103 @@
 {
   "package": "rapier-html",
-  "version": "1.1.99",
+  "version": "1.1.102",
   "path": "dist/rapier.html",
-  "bytes": 2354252,
-  "sha256": "0a0c92f1248a305756b9b20ea06475b542d9f0c5f5d6d0669da8a3091b109544",
-  "builtAt": "2026-10-11T08:20:36.876Z",
+  "bytes": 3629652,
+  "sha256": "b326753f3804e8b1bd1382e062436ce631d774b41da66041427f608c4a16c032",
+  "builtAt": "2026-10-11T21:53:14.793Z",
   "node": "v22.23.3",
   "canonical": true,
   "packing": "zopfli",
+  "plugins": [
+    {
+      "id": "math",
+      "delivery": "built-in",
+      "kind": "script",
+      "element": "rapier-plugin-math",
+      "bytes": 803451,
+      "packedBytes": 544485,
+      "files": [
+        {
+          "id": "rapier-math",
+          "name": "rapier-math-1.0.1.js",
+          "version": "1.0.1",
+          "bytes": 803451,
+          "sri": "1kdn6mohx3a5MAiwqRWY+6oviUHUheHfY1VMsxjDsUrn7woTaa7FSKo4juYtuNaF"
+        }
+      ]
+    },
+    {
+      "id": "mermaid",
+      "delivery": "built-in",
+      "kind": "script",
+      "element": "rapier-plugin-mermaid",
+      "bytes": 294857,
+      "packedBytes": 103232,
+      "files": [
+        {
+          "id": "rapier-mermaid",
+          "name": "rapier-diagrams-1.1.102.js",
+          "version": "1.1.102",
+          "bytes": 294857,
+          "sri": "fmQHeVOJnX1gwaqVihnI/FFSP8hm+Bh/dLQWQ17yvUAJoF9tFd2d6mY5tZ249t8u"
+        }
+      ]
+    },
+    {
+      "id": "letters",
+      "delivery": "built-in",
+      "kind": "files",
+      "element": "rapier-plugin-letters",
+      "bytes": 463027,
+      "packedBytes": 204178,
+      "files": [
+        {
+          "id": "rapier-letters-field",
+          "name": "field.json",
+          "version": "VFsCE/7zS6Kkq/EW1/7NfYHVGoVXNUm0pWHdtJmzXwhWgJWBSKhNHuU0ODuGCar0",
+          "bytes": 96902,
+          "sri": "VFsCE/7zS6Kkq/EW1/7NfYHVGoVXNUm0pWHdtJmzXwhWgJWBSKhNHuU0ODuGCar0"
+        },
+        {
+          "id": "rapier-letters-relief",
+          "name": "relief.json",
+          "version": "tQctBake2gu7B/v5/1jC6XFt5smV5uVg7W7GdJXsJZBZ62Zc7crSP3zRkZPgQqgq",
+          "bytes": 95172,
+          "sri": "tQctBake2gu7B/v5/1jC6XFt5smV5uVg7W7GdJXsJZBZ62Zc7crSP3zRkZPgQqgq"
+        },
+        {
+          "id": "rapier-letters-leaf",
+          "name": "leaf.json",
+          "version": "DtSKWtWhiitlNOfjx9o5Jf0FYcpWLw4nmWAjo1eAA3FOvs2OjB2hddHlRCnrtZ7g",
+          "bytes": 134918,
+          "sri": "DtSKWtWhiitlNOfjx9o5Jf0FYcpWLw4nmWAjo1eAA3FOvs2OjB2hddHlRCnrtZ7g"
+        },
+        {
+          "id": "rapier-letters-arabesque",
+          "name": "arabesque.json",
+          "version": "Zx2z2bEpD4VNkIccLejcUY68eqAFraPEN7hqsqkcVqHOKGvsSMqbLLiXXklvZINl",
+          "bytes": 136035,
+          "sri": "Zx2z2bEpD4VNkIccLejcUY68eqAFraPEN7hqsqkcVqHOKGvsSMqbLLiXXklvZINl"
+        }
+      ]
+    },
+    {
+      "id": "font-subset",
+      "delivery": "built-in",
+      "kind": "files",
+      "element": "rapier-plugin-font-subset",
+      "bytes": 1214356,
+      "packedBytes": 453061,
+      "files": [
+        {
+          "id": "rapier-font-subset",
+          "name": "rapier-font-subset-2.js",
+          "version": "2",
+          "bytes": 1214356,
+          "sri": "q4mHA3+u3N3Yt8z1wisCEXQqWNo5UhHZ0nUESid8BGNZz6BtV8dSUlVOvyndc0Tj"
+        }
+      ]
+    }
+  ],
   "validation": "a release build; not a browser test"
 }

package/README.md

@@ -2,7 +2,7 @@
 
 Turn Markdown into one offline HTML file with the full Rapier editor. It opens in any browser on a phone or
 computer, with no account. People read, edit, draw and paint watercolor. Agents deliver documents, show what
-changed and receive the person's edited copy through the door. Start with `npx rapier-html@1.1.99 notes.md`.
+changed and receive the person's edited copy through the door. Start with `npx rapier-html@1.1.102 notes.md`.
 
 Use it for a plan to rearrange, an illustrated guide to annotate, a draft to continue writing, or a revision
 to review. Text and drawings stay editable, and the file remains usable independently of a hosted workspace.
@@ -18,21 +18,21 @@ to review. Text and drawings stay editable, and the file remains usable independ
 Node 22 or newer.
 
 ```sh
-npx -- rapier-html@1.1.99 notes.md                          # the editor, notes.md inside it, written beside the file
-npx -- rapier-html@1.1.99 notes.md --view draw              # opens on Draw: sketch and paint, the document behind it
-npx -- rapier-html@1.1.99 notes.md --view notes             # opens the Notes library
-npx -- rapier-html@1.1.99 notes.md --drawing sketch.svg     # carries a drawing, opened on Draw over the document
-npx -- rapier-html@1.1.99 revised.md --compare original.md # opens showing what changed
-npx -- rapier-html@1.1.99 notes.md --return "$RETURN_URL" --return-expires-at "$RETURN_EXPIRES_AT" # Send back
-npx -- rapier-html@1.1.99 notes.md out.html                 # a named output
-npm install rapier-html@1.1.99                              # as a library: wrap, unwrap
+npx -- rapier-html@1.1.102 notes.md                          # the editor, notes.md inside it, written beside the file
+npx -- rapier-html@1.1.102 notes.md --view draw              # opens on Draw: sketch and paint, the document behind it
+npx -- rapier-html@1.1.102 notes.md --view notes             # opens the Notes library
+npx -- rapier-html@1.1.102 notes.md --drawing sketch.svg     # carries a drawing, opened on Draw over the document
+npx -- rapier-html@1.1.102 revised.md --compare original.md # opens showing what changed
+npx -- rapier-html@1.1.102 notes.md --return "$RETURN_URL" --return-expires-at "$RETURN_EXPIRES_AT" # Send back
+npx -- rapier-html@1.1.102 notes.md out.html                 # a named output
+npm install rapier-html@1.1.102                              # as a library: wrap, unwrap
 ```
 
 The first `--` is for npm, so `--help` reaches the command. It never overwrites a file.
 
 For live shared editing, open the document through Rapier's MCP tools. The agent edits beside the person or
 while they are away. Rapier shows its presence and change marks; the person taps a change to see the before
-and undoes anything. Use `comparison.present` to show a diff deliberately. Export Markdown or an offline
+and undoes anything. Use `show {target:"comparison"}` to show a diff deliberately. Export Markdown or an offline
 editor when the result needs an independent copy. Send back returns the edited copy alongside the hosted
 document, preserving both.
 
@@ -44,10 +44,10 @@ Rapier is a phone-first Markdown editor for notes, diagrams, drawing and waterco
 as one HTML file on Android, Web and Windows.
 Collaborate over MCP and WebMCP, use optional encrypted sync to your own Cloudflare account, or embed the
 editor and lightweight reader (about 190 kB gzipped). The agent edits live; the person sees its presence and
-changes, taps a change to see the before and undoes anything. Use `comparison.present` to show a diff deliberately.
+changes, taps a change to see the before and undoes anything. Use `show {target:"comparison"}` to show a diff deliberately.
 
-1. **Work together live.** Connect to `https://mcp.rapier.website/mcp`, then call `rapier.open` to share one document with the person.
-2. **Deliver an offline editor.** Run `npx rapier-html@1.1.99 notes.md` to put the document and editor in one HTML file ([rapier-html](https://github.com/jackskip22/rapier-plugins/tree/main/npm/rapier-html)).
+1. **Work together live.** Connect to `https://mcp.rapier.website/mcp`, then call `open` to share one document with the person.
+2. **Deliver an offline editor.** Run `npx rapier-html@1.1.102 notes.md` to put the document and editor in one HTML file ([rapier-html](https://github.com/jackskip22/rapier-plugins/tree/main/npm/rapier-html)).
 3. **Embed in your app.** Install [rapier-embed](https://github.com/jackskip22/rapier-plugins/tree/main/npm/rapier-embed); mount the editor or reader, with your app's agent over WebMCP in the editor.
 4. **Keep portable Markdown.** Use [rapier-markdown-kit](https://github.com/jackskip22/rapier-plugins/tree/main/npm/rapier-markdown-kit) for pictures, editable SVG drawings and layout in one `.md` file. Respect [Will/1](https://github.com/jackskip22/will) `keep`, `append` and `edit` regions.
 5. **Encode JPEG XL.** Install [rapier-jxl](https://github.com/jackskip22/rapier-jxl) to encode pixels, photographs and existing JPEGs in JavaScript.
@@ -55,7 +55,7 @@ changes, taps a change to see the before and undoes anything. Use `comparison.pr
 
 ## Send an edited document back
 
-Call `document.create_return` on the Rapier agent door for the document's workspace and pass its `return_url`
+Call `show {target:"return"}` on the Rapier agent door for the document's workspace and pass its `return_url`
 and `return_expires_at` as `--return "$RETURN_URL" --return-expires-at "$RETURN_EXPIRES_AT"`, or
 `wrap(..., {return: return_url, return_expires_at})`. Only the worker's HTTPS return route at
 `https://mcp.rapier.website/return/…` is accepted. The page then shows Send back in Share; a page without an
@@ -63,14 +63,13 @@ address has no such action.
 
 The person edits offline and presses Send back: the current source and filename go once, the page shows the
 acceptance or the worker's refusal, and it sends nothing again. The return lasts up to one day, takes one
-document up to 25 MiB and grants no access to the agent's workspace. After the expiry, or a refusal, Share offers
+document with a 64 MiB decoded-source ceiling, subject to the workspace’s remaining storage quota, and grants no
+access to the agent's workspace. After the expiry, or a refusal, Share offers
 Save instead; bring that file back to the assistant for a fresh return.
 
-The agent's `document.wait_for_user` returns a `returned` receipt with the `return_id`, name and time;
-`document.observe` with the `returns` facet lists receipts. Use
-`document.read({target: {kind: "return", return_id, start: 0}})` to read the source, then `cursor` alone
-to continue until complete. The returned copy stays separate from the workspace's
-current document.
+`show {target:"ask",wait:"message"}` returns a `returned` receipt with the `return_id`, name and time;
+`read {state:true}` lists returned-copy receipts. Use `read {return_id}` for the source, then `cursor`
+alone to continue until complete. The returned copy stays separate from the workspace's current document.
 
 ## As a library
 
@@ -112,10 +111,10 @@ Send back.
 - It never overwrites: an existing output, the document itself included, is refused, as are unknown options, a
   `--view` other than `draw` or `notes`, a `--drawing` or `--compare` with no file, a return without its expiry, an
   invalid expiry, an unsafe return URL and a third filename.
-- Nothing reports on the page's use. It reaches the network only when the document or the person asks: a linked
-  picture or video, a plug-in on first use (maths, diagrams, PDF import, text in pictures, a letter set), or
-  Send back. A return URL names only the worker's exact origin and route; credentials, query strings and fragments
-  are refused.
+- Opening and rendering use carried resources; the page cannot fetch pictures, media, fonts or plug-ins.
+  The staged editor includes verified math, Mermaid and lettering resources. Embed any document pictures.
+  An explicit Send back connects only to the minted return origin. Its URL names the worker's exact route;
+  credentials, query strings and fragments are refused.
 
 ## Optional edit history
 

package/dist/ledger/LICENSE

@@ -22,7 +22,9 @@ SOFTWARE.
 
 Files under this licence carry `SPDX-License-Identifier: MIT` in their first lines: the standard's
 grammar, marks and reference style (`spec/md-layout.mjs`, `spec/md-marks.mjs`, `spec/flowchart.mjs`, `spec/markdown-style.css`), the layout model and line planner
-(`layout/model.mjs`, `layout/line-plan.mjs`), the Will grammar (`agent/will.mjs`), the picture appendix reader and writer
+(`layout/model.mjs`, `layout/line-plan.mjs`, `layout/typography.mjs`),
+the portable HTML and document metadata helpers (`spec/html-blocks.mjs`, `spec/frontmatter.mjs`,
+`spec/document-settings.mjs`, `spec/document-fonts.mjs`), the Will grammar (`agent/will.mjs`), the picture appendix reader and writer
 (`spec/md-assets.mjs`), the two shared-page reference readers (`tools/read-shared-page.mjs`,
 `tools/read-shared-page.py`), and the host helper `packages/rapier-embed/embed.mjs` with its
 contract owner `packages/rapier-embed/contract.mjs`. The vendored Pretext (`agent/vendor/pretext`) and micromark carry their
@@ -32,12 +34,18 @@ record validator/replayer and text-only conflict merger were moved, not copied,
 into that module; the Notes index merger and the rest of the agent/editor remain
 AGPL-3.0-only. The wrapper's carrier-staging helper
 (`skills/rapier-html/package-files.mjs`) is MIT. The kit's MIT-marked facades,
-`kit/render-entry.mjs`, `kit/render*.mjs`, `kit/stage.mjs` and MIT-marked conformance
+`kit/render-entry.mjs`, `kit/render*.mjs`, `kit/export-fonts.mjs`, `kit/print-capitals.mjs`,
+`kit/pdf-vectors.mjs`, `kit/pdf-glyphs.mjs`, `kit/stage.mjs` and MIT-marked conformance
 modules are covered too. These names describe the Rapier-owned files carrying the
 MIT notice, not a grant over the editor or third-party code. Other Rapier-owned
 files retain their stated licence; the editor is AGPL-3.0-only (see `LICENSE`).
 Third-party components retain their own copyright and licence notices.
 
+The portable font helpers read document definitions and accept explicit host validation and
+subsetting functions. The application binding (`editor/export-fonts.mjs`), captured-font
+materializer (`kit/document-fonts.mjs`) and font codecs (`draw/font*.mjs`) remain AGPL-3.0-only
+and are not part of the MIT package's import graph.
+
 The picture appendix reader and writer used to be part of `images/assets.mjs`, a file that also
 holds JPEG XL/raster header inspection and SVG sanitizing -- both of which reach the editor's own
 AGPL-3.0-only decoders (`images/raster.mjs`, `draw/font.mjs`), so the whole file could not honestly

package/dist/ledger/data.mjs

@@ -27,7 +27,7 @@ export function exactKeys(value, keys) {
 }
 export function documentText(text) {
   if (typeof text !== 'string' || /[\uD800-\uDFFF]/u.test(text)) throw fault('document is not whole-character text');
-  if (new TextEncoder().encode(text).length > 25 * 1024 * 1024) throw fault('document exceeds the editor text limit');
+  if (new TextEncoder().encode(text).length > 64 * 1024 * 1024) throw fault('document exceeds the editor text limit');
   return text;
 }
 export const nonnegative = value => Number.isSafeInteger(value) && value >= 0 && !Object.is(value, -0);