fullbleed 2.2.0__tar.gz → 2.2.3__tar.gz

{fullbleed-2.2.0 → fullbleed-2.2.3}/Cargo.lock

@@ -4,15 +4,16 @@ version = 4
 
 [[package]]
 name = "fullbleed"
-version = "2.2.0"
+version = "2.2.3"
 dependencies = [
  "fullbleed_audit_contract",
  "subsetter",
+ "unicode-bidi",
 ]
 
 [[package]]
 name = "fullbleed_audit_contract"
-version = "0.1.2"
+version = "0.1.3"
 
 [[package]]
 name = "rustc-hash"
@@ -28,3 +29,9 @@ checksum = "38803281d1c23166c5ebcb455439a5d2afe711cc909cf88af72448c297756ad6"
 dependencies = [
  "rustc-hash",
 ]
+
+[[package]]
+name = "unicode-bidi"
+version = "0.3.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5c1cb5db39152898a79168971543b1cb5020dff7fe43c8dc468b0885f5e29df5"

{fullbleed-2.2.0 → fullbleed-2.2.3}/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "fullbleed"
-version = "2.2.0"
+version = "2.2.3"
 edition = "2024"
 rust-version = "1.85"
 license = "MIT"
@@ -37,5 +37,6 @@ inherits = "release"
 debug = true
 
 [dependencies]
-fullbleed_audit_contract = { version = "0.1.2", path = "crates/fullbleed_audit_contract" }
+fullbleed_audit_contract = { version = "0.1.3", path = "crates/fullbleed_audit_contract" }
 subsetter = { version = "0.2.6", default-features = false }
+unicode-bidi = "0.3.18"

{fullbleed-2.2.0 → fullbleed-2.2.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: fullbleed
-Version: 2.2.0
+Version: 2.2.3
 Classifier: Development Status :: 5 - Production/Stable
 Classifier: License :: OSI Approved :: MIT License
 Classifier: Operating System :: MacOS
@@ -125,6 +125,10 @@ markers, deterministic bytes, and equal buffer/file SHA-256. Reproduce it with:
 python tools/benchmark_fullbleed_vdp.py --records 100000 --repeats 5
 ```
 
+Fixed-geometry slots may remain inside immutable page-space transforms and clips. The compiler
+captures that active coordinate-state program once and replays it in each compact record overlay;
+it does not rerun layout or clone the complete page display list.
+
 The fixed-copy result remains scoped to identical content; the variable-data result is scoped to
 paint-only text whose geometry does not reflow. Neither is a claim that arbitrary new HTML or
 size-changing records render 200x faster. See
@@ -143,7 +147,7 @@ python -m pip install fullbleed
 From a local wheel:
 
 ```bash
-python -m pip install C:\path\to\fullbleed-2.2.0-cp310-abi3-win_amd64.whl
+python -m pip install C:\path\to\fullbleed-2.2.3-cp310-abi3-win_amd64.whl
 ```
 
 From a source checkout with Rust installed, no Python build package is needed:
@@ -194,7 +198,9 @@ vendors `inter` into `vendor/fonts/Inter-Variable.ttf`, writes license notices
 and seeds `assets.lock.json` with pinned hashes.
 The scaffolded `report.py` also runs a component mount smoke validation before
 main render and writes `output/component_mount_validation.json` (fails fast on
-missing glyphs, placement overflow, or CSS miss signals parsed from debug logs).
+missing glyphs, actual pagination overflow, or CSS miss signals). On current engines,
+render-time pagination is authoritative for overflow; conservative JIT placement bounds
+remain the compatibility fallback for older engines.
 Scaffolded components now include `components/primitives.py` with reusable
 layout/content helpers (`Stack`, `Row`, `Text`, table/list helpers, key/value rows, etc.).
 Each scaffolded project also includes `SCAFFOLDING.md`, which should be your
@@ -789,6 +795,20 @@ Summary as of May 19, 2026:
 - Canonical validation artifact: `_css_working/tmp/fixture_full_latest.json`
 - Canonical validation artifact: `_css_working/css_broad_coverage_sprint_s14.md`
 
+The complete pinned independent Wheel265 gate closed on August 9, 2026 with `1,642 PASS`,
+`0 FAIL`, and `20 REFERENCE-DISPUTED` across 1,662 fixtures. That is strict `100%` parity for
+every adjudicable fixture in this named corpus; disputed references remain visible and are not
+relabeled as implementation passes. Broader web-platform coverage remains bounded by the module
+and known-gap contract in `docs/css-coverage.md`.
+
+Flow/reflow hardening validated on August 5, 2026 adds fixed-height block,
+one-column grid, and column-flex continuation slicing; avoids content
+duplication; retains empty styled captions inside avoided figures; preserves
+`display: contents` grid paint phase; and keeps positioned containing blocks
+atomic. The independent review's targeted 18-case regression cluster passes
+`18/18` (13 pixel-exact, maximum above-floor difference `0.97030199%`). This
+targeted diagnostic does not replace the full external-corpus report.
+
 Current validated behavior includes first-class parser -> evaluator -> calculator -> layout/paint coverage across broad static-document CSS domains (values math, layout primitives, pagination/fragmentation baselines, transforms phase-1, gradient/effects subsets including color-first and interleaved-color `filter: drop-shadow(...)` with computed lengths, modern `rgb()` shadow colors with `mm` lengths, duplicate `drop-shadow(...)` color rejection, empty optional filter-function defaults, explicit/currentColor `backdrop-filter: drop-shadow(...)` raster paint, strict `box-shadow` length/color grammar with modern `rgb()` plus `mm` paint coverage, softened blurred inset edge paint, and directional inset offset edge paint, overflow-gated `text-overflow: ellipsis`, physical min/max box constraints, horizontal-tb RTL `direction` inline inset/margin/padding/border mapping, vertical writing-mode `direction: rtl` inline inset remapping, vertical-rl logical sizing/insets/margin/padding/border/min-max constraints, vertical-lr logical sizing/min-max/insets/margin/padding/border remapping, basic vertical text columns with `vertical-rl` leftward and `vertical-lr` rightward line progression, and deterministic diagnostics).
 
 Known gap categories are explicitly tracked for the final parity push:

{fullbleed-2.2.0 → fullbleed-2.2.3}/README.md

@@ -88,6 +88,10 @@ markers, deterministic bytes, and equal buffer/file SHA-256. Reproduce it with:
 python tools/benchmark_fullbleed_vdp.py --records 100000 --repeats 5
 ```
 
+Fixed-geometry slots may remain inside immutable page-space transforms and clips. The compiler
+captures that active coordinate-state program once and replays it in each compact record overlay;
+it does not rerun layout or clone the complete page display list.
+
 The fixed-copy result remains scoped to identical content; the variable-data result is scoped to
 paint-only text whose geometry does not reflow. Neither is a claim that arbitrary new HTML or
 size-changing records render 200x faster. See
@@ -106,7 +110,7 @@ python -m pip install fullbleed
 From a local wheel:
 
 ```bash
-python -m pip install C:\path\to\fullbleed-2.2.0-cp310-abi3-win_amd64.whl
+python -m pip install C:\path\to\fullbleed-2.2.3-cp310-abi3-win_amd64.whl
 ```
 
 From a source checkout with Rust installed, no Python build package is needed:
@@ -157,7 +161,9 @@ vendors `inter` into `vendor/fonts/Inter-Variable.ttf`, writes license notices
 and seeds `assets.lock.json` with pinned hashes.
 The scaffolded `report.py` also runs a component mount smoke validation before
 main render and writes `output/component_mount_validation.json` (fails fast on
-missing glyphs, placement overflow, or CSS miss signals parsed from debug logs).
+missing glyphs, actual pagination overflow, or CSS miss signals). On current engines,
+render-time pagination is authoritative for overflow; conservative JIT placement bounds
+remain the compatibility fallback for older engines.
 Scaffolded components now include `components/primitives.py` with reusable
 layout/content helpers (`Stack`, `Row`, `Text`, table/list helpers, key/value rows, etc.).
 Each scaffolded project also includes `SCAFFOLDING.md`, which should be your
@@ -752,6 +758,20 @@ Summary as of May 19, 2026:
 - Canonical validation artifact: `_css_working/tmp/fixture_full_latest.json`
 - Canonical validation artifact: `_css_working/css_broad_coverage_sprint_s14.md`
 
+The complete pinned independent Wheel265 gate closed on August 9, 2026 with `1,642 PASS`,
+`0 FAIL`, and `20 REFERENCE-DISPUTED` across 1,662 fixtures. That is strict `100%` parity for
+every adjudicable fixture in this named corpus; disputed references remain visible and are not
+relabeled as implementation passes. Broader web-platform coverage remains bounded by the module
+and known-gap contract in `docs/css-coverage.md`.
+
+Flow/reflow hardening validated on August 5, 2026 adds fixed-height block,
+one-column grid, and column-flex continuation slicing; avoids content
+duplication; retains empty styled captions inside avoided figures; preserves
+`display: contents` grid paint phase; and keeps positioned containing blocks
+atomic. The independent review's targeted 18-case regression cluster passes
+`18/18` (13 pixel-exact, maximum above-floor difference `0.97030199%`). This
+targeted diagnostic does not replace the full external-corpus report.
+
 Current validated behavior includes first-class parser -> evaluator -> calculator -> layout/paint coverage across broad static-document CSS domains (values math, layout primitives, pagination/fragmentation baselines, transforms phase-1, gradient/effects subsets including color-first and interleaved-color `filter: drop-shadow(...)` with computed lengths, modern `rgb()` shadow colors with `mm` lengths, duplicate `drop-shadow(...)` color rejection, empty optional filter-function defaults, explicit/currentColor `backdrop-filter: drop-shadow(...)` raster paint, strict `box-shadow` length/color grammar with modern `rgb()` plus `mm` paint coverage, softened blurred inset edge paint, and directional inset offset edge paint, overflow-gated `text-overflow: ellipsis`, physical min/max box constraints, horizontal-tb RTL `direction` inline inset/margin/padding/border mapping, vertical writing-mode `direction: rtl` inline inset remapping, vertical-rl logical sizing/insets/margin/padding/border/min-max constraints, vertical-lr logical sizing/min-max/insets/margin/padding/border remapping, basic vertical text columns with `vertical-rl` leftward and `vertical-lr` rightward line progression, and deterministic diagnostics).
 
 Known gap categories are explicitly tracked for the final parity push:

{fullbleed-2.2.0 → fullbleed-2.2.3}/crates/fullbleed_audit_contract/Cargo.lock

@@ -4,4 +4,4 @@ version = 4
 
 [[package]]
 name = "fullbleed_audit_contract"
-version = "0.1.2"
+version = "0.1.3"

{fullbleed-2.2.0 → fullbleed-2.2.3}/crates/fullbleed_audit_contract/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "fullbleed_audit_contract"
-version = "0.1.2"
+version = "0.1.3"
 edition = "2024"
 rust-version = "1.85"
 license = "MIT"

{fullbleed-2.2.0 → fullbleed-2.2.3}/crates/fullbleed_audit_contract/src/lib.rs

@@ -298,6 +298,9 @@ fn hash_memoized(cell: &OnceLock<String>, text: &str) -> String {
 static AUDIT_REGISTRY_HASH: OnceLock<String> = OnceLock::new();
 static WCAG20AA_REGISTRY_HASH: OnceLock<String> = OnceLock::new();
 static SECTION508_HTML_REGISTRY_HASH: OnceLock<String> = OnceLock::new();
+static AUDIT_REGISTRY_TEXT: OnceLock<String> = OnceLock::new();
+static WCAG20AA_REGISTRY_TEXT: OnceLock<String> = OnceLock::new();
+static SECTION508_HTML_REGISTRY_TEXT: OnceLock<String> = OnceLock::new();
 static CONTRACT_FINGERPRINT: OnceLock<String> = OnceLock::new();
 static AUDIT_REGISTRY_JSON_VALUE: OnceLock<Value> = OnceLock::new();
 static WCAG20AA_REGISTRY_JSON_VALUE: OnceLock<Value> = OnceLock::new();
@@ -306,23 +309,45 @@ static A11Y_DEFAULT_GATE_LEVELS: OnceLock<BTreeMap<String, String>> = OnceLock::
 static A11Y_PROFILE_GATE_OVERRIDES: OnceLock<BTreeMap<String, BTreeMap<String, String>>> =
     OnceLock::new();
 
+fn canonical_lf(text: &str) -> String {
+    text.replace("\r\n", "\n").replace('\r', "\n")
+}
+
+fn audit_registry_text() -> &'static str {
+    AUDIT_REGISTRY_TEXT
+        .get_or_init(|| canonical_lf(AUDIT_REGISTRY_V1_JSON))
+        .as_str()
+}
+
+fn wcag20aa_registry_text() -> &'static str {
+    WCAG20AA_REGISTRY_TEXT
+        .get_or_init(|| canonical_lf(WCAG20AA_REGISTRY_V1_JSON))
+        .as_str()
+}
+
+fn section508_html_registry_text() -> &'static str {
+    SECTION508_HTML_REGISTRY_TEXT
+        .get_or_init(|| canonical_lf(SECTION508_HTML_REGISTRY_V1_JSON))
+        .as_str()
+}
+
 fn audit_registry_value() -> &'static Value {
     AUDIT_REGISTRY_JSON_VALUE.get_or_init(|| {
-        json::parse(AUDIT_REGISTRY_V1_JSON)
+        json::parse(audit_registry_text())
             .expect("embedded audit registry must be valid JSON-formatted YAML")
     })
 }
 
 fn wcag20aa_registry_value() -> &'static Value {
     WCAG20AA_REGISTRY_JSON_VALUE.get_or_init(|| {
-        json::parse(WCAG20AA_REGISTRY_V1_JSON)
+        json::parse(wcag20aa_registry_text())
             .expect("embedded wcag20aa registry must be valid JSON-formatted YAML")
     })
 }
 
 fn section508_html_registry_value() -> &'static Value {
     SECTION508_HTML_REGISTRY_JSON_VALUE.get_or_init(|| {
-        json::parse(SECTION508_HTML_REGISTRY_V1_JSON)
+        json::parse(section508_html_registry_text())
             .expect("embedded section508 html registry must be valid JSON-formatted YAML")
     })
 }
@@ -350,25 +375,25 @@ fn worst_verdict<'a>(verdicts: impl IntoIterator<Item = &'a str>) -> Option<&'a
 }
 
 pub fn audit_registry_v1_json() -> &'static str {
-    AUDIT_REGISTRY_V1_JSON
+    audit_registry_text()
 }
 
 pub fn wcag20aa_registry_v1_json() -> &'static str {
-    WCAG20AA_REGISTRY_V1_JSON
+    wcag20aa_registry_text()
 }
 
 pub fn audit_registry_v1_hash_sha256() -> String {
-    hash_memoized(&AUDIT_REGISTRY_HASH, AUDIT_REGISTRY_V1_JSON)
+    hash_memoized(&AUDIT_REGISTRY_HASH, audit_registry_text())
 }
 
 pub fn wcag20aa_registry_v1_hash_sha256() -> String {
-    hash_memoized(&WCAG20AA_REGISTRY_HASH, WCAG20AA_REGISTRY_V1_JSON)
+    hash_memoized(&WCAG20AA_REGISTRY_HASH, wcag20aa_registry_text())
 }
 
 pub fn section508_html_registry_v1_hash_sha256() -> String {
     hash_memoized(
         &SECTION508_HTML_REGISTRY_HASH,
-        SECTION508_HTML_REGISTRY_V1_JSON,
+        section508_html_registry_text(),
     )
 }
 
@@ -404,15 +429,15 @@ pub fn contract_fingerprint_sha256() -> String {
 
 pub fn registry_json(name: &str) -> Option<&'static str> {
     match name {
-        AUDIT_REGISTRY_ID => Some(AUDIT_REGISTRY_V1_JSON),
-        WCAG20AA_REGISTRY_ID => Some(WCAG20AA_REGISTRY_V1_JSON),
-        SECTION508_HTML_REGISTRY_ID => Some(SECTION508_HTML_REGISTRY_V1_JSON),
+        AUDIT_REGISTRY_ID => Some(audit_registry_text()),
+        WCAG20AA_REGISTRY_ID => Some(wcag20aa_registry_text()),
+        SECTION508_HTML_REGISTRY_ID => Some(section508_html_registry_text()),
         _ => None,
     }
 }
 
 pub fn section508_html_registry_v1_json() -> &'static str {
-    SECTION508_HTML_REGISTRY_V1_JSON
+    section508_html_registry_text()
 }
 
 pub fn wcag20aa_coverage_from_rule_verdicts<'a, I>(rule_verdicts: I) -> Wcag20AaCoverageSummary
@@ -860,7 +885,7 @@ pub fn metadata() -> AuditContractMetadata {
 mod tests {
     use super::*;
     fn parse_embedded_audit_registry() -> Value {
-        json::parse(AUDIT_REGISTRY_V1_JSON).expect("embedded audit registry JSON should parse")
+        json::parse(audit_registry_text()).expect("embedded audit registry JSON should parse")
     }
 
     #[test]
@@ -871,7 +896,7 @@ mod tests {
         );
         assert_eq!(
             wcag20aa_registry_v1_hash_sha256(),
-            "3ff936a514baac7b528b2745ec88c9e8d2b4c52c56bd63b39478a897ac52f30c"
+            "108d4e5062ede7c5c3893fff78153a58f35749d2dd9df58173fc2dd0dbcd36b6"
         );
         assert_eq!(
             section508_html_registry_v1_hash_sha256(),
@@ -882,10 +907,22 @@ mod tests {
         assert_eq!(a, b);
         assert_eq!(
             a,
-            "db3f5de6ea0c6cd5b3c1828c58f2023d093cc4a46c9302c2ac3bed47c5277de5"
+            "83123c2d5ff2a8b459326a360e3eeac1134fb1eef4c704c433dadfd3e32606d5"
         );
     }
 
+    #[test]
+    fn registry_payloads_are_canonical_lf() {
+        for id in [
+            AUDIT_REGISTRY_ID,
+            WCAG20AA_REGISTRY_ID,
+            SECTION508_HTML_REGISTRY_ID,
+        ] {
+            let payload = registry_json(id).expect("known registry should have a payload");
+            assert!(!payload.contains('\r'), "{id} contains a carriage return");
+        }
+    }
+
     #[test]
     fn registry_lookup_returns_known_payloads() {
         assert!(

{fullbleed-2.2.0 → fullbleed-2.2.3}/pyproject.toml

@@ -5,7 +5,7 @@ backend-path = ["build_backend"]
 
 [project]
 name = "fullbleed"
-version = "2.2.0"
+version = "2.2.3"
 description = "Deterministic static HTML/CSS-to-PDF renderer built in Rust"
 readme = "README.md"
 requires-python = ">=3.10"

{fullbleed-2.2.0 → fullbleed-2.2.3}/python/fullbleed/ui/core.py

@@ -885,7 +885,11 @@ def validate_component_mount(
     asset_unresolved_count = int(asset_summary.get("unresolved_count") or 0)
     asset_unsupported_count = int(asset_summary.get("unsupported_count") or 0)
     asset_reference_count = int(asset_summary.get("image_reference_count") or 0)
-    if pagination_overflow_count > overflow_count:
+    # The native pagination trace describes layout overflow directly. Legacy
+    # JIT placement bounds are a fallback for older engines and can be wider
+    # than the painted glyph outlines because glyph runs use conservative
+    # diagnostic padding.
+    if pagination_trace_available:
         overflow_count = pagination_overflow_count
         overflow_samples = pagination_overflow_samples
     if pagination_trace_available: