# Changelog All notable changes to `@oix1987/yjd` are documented here. The format follows [Keep a Changelog](https://keepachangelog.com/), and the project adheres to [Semantic Versioning](https://semver.org/). ## [2.15.0] — 2026-08-20 ### Added - **Selection-bubble custom buttons.** `'block-toolbar'.buttons` accepts `{ id, title, icon | text, onClick(editor, selection) }` entries rendered with the built-in button chrome; the selection survives the click. (#74) - **`showOnFocus` bubble mode** for input-like fields: the bubble appears on focus anchored at the caret, follows a collapsed caret instead of hiding, and hides on blur. (#75) - **`'block-toolbar'.sheet`** filters the "⋮" overflow sheet — `true` (all), `false` (none), or an allow-list of `'highlight' | 'comment' | 'copy' | 'clear-format'`; the ⋮ and its separator disappear when nothing remains. (#70) ### Fixed - **Bubble no longer drifts on page scroll.** Positioning is now a pure wrapper-relative anchor with no `window.scrollY` terms (the bubble is an absolute child of the wrapper, so element-relative coordinates ride page scroll for free); the window-scroll reposition listener is gone. (#76) - **Bubble shows in short, input-sized editors** — it overhangs the editor instead of hiding when there is no headroom, flipping below the anchor only when above would leave the viewport. This also lets the bubble **coexist with the top toolbar module**. (#73, #72) - **Mention chips serialize their `data-token` through every text path** — `getText()` in rich and plainText modes, and the plainText `setContent` flatten. (#69) - **AI diff-edit no longer silently degrades to a plain replace** when the selection endpoints sit on the editable root (e.g. `selectNodeContents(root)` before `editor.ai.run()`): endpoints now resolve into the block they point at. Multi-block selections still fall back by design. (#71) ### Fixed (merged from open PRs) - **Block-handle gutter no longer blinks when the mouse crosses between blocks.** Inter-block margins belong to no block rect, so a vertical mouse path hid the ⠿/+ handles for the width of every margin and re-showed them in the next block — one blink per boundary. The gutter now snaps to the nearest block while the pointer is between two blocks (above the first / below the last block it still hides). (#65) - **Portaled popups regained their popup styling.** The body-level portal (`popup:'fixed'`, or `'auto'` under a clipping ancestor) compounded both scope classes on one element, so every descendant-scoped popup rule — including the base-layer font enforcement that shields popup form controls from host-page CSS — silently stopped matching. Popups now mount in an inner `.rich-editor-popup-container` nested in the portal. Also, `.yjd-select-input` uses `min-height` instead of a fixed height, so environments that inflate fonts (host CSS, browser minimum font size, OS accessibility text sizing) grow the control instead of clipping its label. (#67) ## [2.14.0] — 2026-08-19 ### Added - **`plainText: true` — a first-class plain-text mode** for the chat/prompt/ comment hosts the package targets. All formatting is off (format UI, ⌘B/I/U/K, markdown input rules, auto-linkify), paste is forced plain, and `getContent()` / `onChange` / the `submit` handler deliver newline-separated plain text; `setContent()` flattens any markup it receives. Mentions and the AI module keep working; `serializeAttachments` tails switch to the markdown shape. (#60) ### Fixed - **TypeScript types resolve under `moduleResolution: "Bundler"`.** The `exports` map now carries a `types` condition for `.` and `./core`, so Vite and other Bundler-resolution consumers get `index.d.ts` instead of a silent `any` (TS7016). (#58) - **A flat `toolbar` array is now a true allow-list.** Merely probing format active-state used to instantiate all 19 formats, mounting every picker popup (heading levels, font list, line heights, colour grids — 118 controls) into the DOM even for `toolbar: ['undo', 'redo']`. Formats whose control isn't in the toolbar are no longer instantiated at all. (#59) - **`prompt.format: []` removes the format buttons.** `format` is the new preferred name (with `tools` kept as an alias); an explicit empty array now renders no Bold/Italic and no empty group chrome. (#62) - **The prompt layout's Send button renders only when a `submit` handler (`onSubmit`/`onEnter`) is configured** — no more dead Send in prompt-styled fields that have nothing to submit. (#63) ### Changed - **Default `width` is now `'100%'`** (was a fixed `800`px, which overflowed any narrower container — intermittently by viewport, thanks to the clamp). Pass `width: 800` to restore the old behaviour. (#61) ## [2.13.6] — 2026-08-11 ### Changed - **Relicensed ISC → MIT.** Functionally equivalent (permissive, commercial-OK) but passes enterprise OSS-review allowlists with less friction. Copyright is now a real, verifiable holder — `Nguyen Tuan Nam ` — instead of a pseudonym, and `package.json` `author`/`license` match. Zero runtime deps unchanged, so consumers still inherit no third-party license obligations. ### Added - **License banner in the bundles.** Every `dist/*.js` now carries a `/*! @oix1987/yjd | MIT License | © 2024 Nguyen Tuan Nam */` banner (terser preserves `/*!`), so a standalone-redeployed bundle carries the MIT notice — not only the npm tarball's `LICENSE`. `CONTRIBUTING.md` adds a DCO sign-off note so contributions stay unambiguously under MIT. ### Fixed - **Comment-thread reply / composer buttons rendered oversized.** The 2.13.2 un-layered popup-button guard (`.yjd-button-confirm`/`.yjd-button-cancel`) beat the layered compact rules on `.yjd-c-replybtn` / `.yjd-c-cbtn` (they reuse those classes), so the thread Reply button and the new-comment Cancel/Comment buttons showed popup-size padding (8px 15px) and 14px text next to the 26px input. Added an un-layered compact override so they stay tight. ## [2.13.5] — 2026-08-09 **Responsive & host-integration fixes.** Three layout problems that only showed up at small sizes or when the editor is embedded in a real app. ### Fixed - **Popovers no longer break inside host apps.** Toolbar popovers were placed `position: absolute` INSIDE the editor, so any host ancestor between the editor and `` that clips (`overflow` ≠ `visible`) or re-roots (`transform`/`filter`/`perspective`/`contain`) would cut them off or bury them under host chrome — the #1 integration complaint. New `popup` option (`'auto'` default) portals popovers to `` with `position: fixed` when such an ancestor is detected (or always with `popup: 'fixed'`), immune to host overflow/transform/stacking. Portaled popovers carry the editor's theme class + `--rte-*` tokens (identical styling), reposition on scroll/resize, and are cleaned up on `destroy()`. `popup: 'wrapper'` keeps the legacy placement. - **Side panel squished content on narrow embedded editors.** The rail's collapse used a viewport `@media (max-width: 720px)`, so an editor narrow inside a WIDE viewport (a split pane, a preview card) kept the fixed 268px rail and crushed the content column to a mid-word-wrapping sliver. It now folds via a **container query** keyed to the EDITOR's own width (with an `@media` fallback for engines without container queries). - **Expanded toolbar overflow wrapped into a ragged mess.** The reflow packed all overflowed tools into a single `flex-wrap` row, so groups wrapped unevenly and the vertical dividers stranded at wrapped-line starts. The reflow now packs the overflow into multiple non-wrapping rows (the layout the CSS was written for) — clean single-line rows separated by a hairline. ### Added - `popup: 'auto' | 'fixed' | 'wrapper'` option (see above). - `--rte-toolbar-group-gap` already shipped in 2.13.2; the container-query rail fold is new here. ## [2.13.4] — 2026-08-09 **Complete i18n coverage.** 2.13.3 shipped `options.strings`, but only the toolbar tooltips, add-menu and a few popups routed through it. This wires **every** remaining user-visible string in the library through `editor.t()`, so an integrator can fully localise the editor. ### Added - **`t()` now interpolates `{name}` placeholders** — a composite localises as one unit: `t('toolbar.hideNTools', 'Hide {n} more tools', { n })`. Modules get a safe `this.t()` (falls back to English if the editor lacks `t()`). - **`--` (new namespaces)**: the slash menu (`slash.*`), side panel (`panel.*`), find & replace (`find.*`), AI bar (`ai.*`), block & table toolbars (`block.*` / `table.*`), block/resize handles, code tools (`code.*`), status bar (`status.*`), editor placeholder (`editor.placeholder`), the tag / import / emoji popups (`tag.*` / `import.*` / `emoji.*`), the link hover bar, and every format dropdown (`heading.*`, `size.*`, `case.*`, `spacing.*`, `lineHeight.*`, `align.*`, `list.*`, `color.*`) all resolve through `options.strings`. ### Fixed - **Two tooltips overwrote their own translation on toggle**: the code-view and fullscreen buttons re-set an English `title` every time they toggled, clobbering a `toolbar.code-view` / `toolbar.fullscreen` value from `options.strings`. They now re-resolve through `t()`. - The special toolbar buttons (Send / Add / More) and the list-picker tooltips — reported as missed by `options.strings` — now localise (they bypassed the central tooltip map). ### Security - App-supplied strings injected into an `innerHTML` template (slash menu, AI bar) are HTML-escaped, so a translation can't inject markup. ### Notes - Emoji **search** stays keyed on the English emoji names (localising the index is a separate, larger job); category labels and chrome do localise. Font-family names are proper nouns, left as-is. - Size ceilings +2 KB for the added lookups. ## [2.13.3] — 2026-08-09 **Security-forward integration release.** Closes a class of URL/attribute injection gaps found while acting on the 2.13.2 integration report (an independent sink audit surfaced more of the same class), plus the report's i18n, migration, and toolbar-spacing asks. ### Security - **URL scheme validation across the serializers.** `markdownToHtml` now runs every emitted link `href` and media `src` through the same allowlist the DOM sanitizer uses (`isSafeUrl`): `javascript:` / `vbscript:` / `data:text/html` are dropped instead of passed through. `jsonToHtml` strips `on*` event-handler attributes and validates `href`/`src`. `htmlToMarkdown` drops unsafe URLs too, so the exported serializers are safe standalone **and** across an html↔markdown round-trip (previously they relied entirely on a downstream `sanitizeHtml`, which an integrator using the raw exports may not run). - **File-attachment chip href** (`insertFileAttachment`) is scheme-checked. The no-upload-hook path embeds the file as a `data:` URL, so an attached `.html` file could otherwise become a clickable `data:text/html` chip in saved content. A new `isSafeUrl` option, `allowDataFile`, permits inert file data URIs (pdf, zip, office, text) while blocking script-capable document types (`text/html`, `xhtml`, `svg`, `xml`). - **Attachment serialization** (`serializeAttachments`) validates `att.src` before emitting the ``/``. - Raw ``/``); unlink unwraps in one undoable step. - **Find & replace options**: "Whole word" and regex (`.*`) toggles join the match-case chip on their own options row; regex mode uses the term verbatim, whole-word wraps it in `\b` boundaries. - **Emoji picker chrome (UI 2.0)**: search field (name-based), a "Frequently used" section backed by localStorage recents, and 7 category tabs replace the flat grid + OS-shortcut footer. A custom `emojis: []` option still renders as a single grid. - **AI selection menu**: the actions render as a vertical menu — "EDIT SELECTION" mono header, per-action icons, and an "Ask AI…" input row with an accent sparkle and ↵ hint (was a wrapped row of text buttons). - **Colour picker headers**: "Text colour" / "Background" / "Cell background" mono headers via the new `title` option. - **Friendly breadcrumb**: the status bar now reads "H2 · Patch pipeline" in a heading and "Body › Paragraph" elsewhere, instead of the raw CSS selector path. - **Table toolbar polish**: hairline dividers between button groups; the delete-table/row/column commands render in danger ink with a danger-weak hover wash. - Stylesheet size budget raised 12 → 13 KB (brotli) for the new component chrome; JS bundles remain under their 75 KB ceilings. - **Error-state UX (design "States" section)**: the link popup shows the input-error recipe (danger border/ring + "Enter a valid URL" + icon) for an invalid or unsafe URL instead of silently console.warning; attachment chips reflect upload status (indeterminate progress bar while pending, danger ring + "!" badge on failure, integrator-set statuses included); the default placeholder becomes the design's empty state ("Start writing, or press / to insert a block…"). - **Toolbar clusters match the design bar**: hairline dividers between groups using the design's exact recipe (1px × 20px centred line, 4px breathing room) on the primary row **and** every overflow row (the mobile swipe-row stays an uninterrupted strip); the colour/background buttons join the inline-formatting cluster, and a new **Quote** toolbar button (toggles blockquote ↔ paragraph) sits with list/link per the design. Alignment + indent buttons move to the overflow row like the design's Standard preset, and group spacing tightens to the design's 4px rhythm (reflow packer constants updated to match). - **Phase A of the design-feature roadmap** (docs/UI2-FEATURE-ROADMAP.md): - **Inline `code` format** — toolbar button in the text cluster wraps the selection in `` (toggles off by unwrapping the chip; never nests inside a `
`).
  - **Code-block tools** — a floating chip bar over the code block at the
    caret: language label (from `data-lang`) + one-click **Copy**, exactly the
    design's code card header. New default module `code-block-tools`.
  - **"+" insert menu in the standard toolbar** — the design's single plus
    replaces the separate image/table buttons and opens the insert menu
    (image / file / video / table by default, `prompt.add`-style configurable).
  - **`print` / `download` commands** — `printContent()` renders the document
    with read-view styles in a hidden iframe and opens the print dialog;
    `downloadContent('html'|'md')` saves a styled HTML file or Markdown.
  - **Letter-spacing format** — Tight/Normal/Wide/Wider picker applying
    tracking to the selected block(s) (design's `letter-spacing` icon), in the
    overflow row's script cluster.
  - **Table header column** — `header-col` toggle in the table toolbar turns
    the first column into `` cells (sibling of the header-row toggle).
  - **Loading skeleton CSS** — `.yjd-skeleton` (+`-bar`/`-chip`/`-body`/`-line`)
    mirrors the 44px chrome so mounting the editor causes zero layout shift.
  - **Date chip** — `insertDateChip()` / the `date` command inserts an inline
    chip with `data-date` (info-wash styling, non-editable).
  - Size ceilings raised for the feature set: all-in-one bundles 75 → 78 KB
    (actual ~75.2), stylesheet 13 → 14 KB (actual 13.63 after the callout/toggle blocks). Tree-shaken presets
    (Minimal ~17 KB) are unaffected — none of the new modules load unless used.
- **Phase C1 — block handles** (the design's editor-surface signature): hover a
  block to reveal the left-gutter pair — **⠿ drag to reorder** (accent drop
  indicator, one undo step) and **+** (inserts a paragraph below and opens the
  slash menu). New default module `block-handles`; reserves the design's left
  gutter (desktop pointers only), off in the prompt layout, and nothing extra
  ever serializes.
- **Phase B1 — Callout block**: `/callout` inserts a tinted note with a
  CSS-drawn leading icon; variants via `data-callout="info|success|warning|
  danger"` on the semantic tokens. Serializes as a plain
  `
` and renders identically in the read view.
- **Phase B2 — Toggle block**: `/toggle` inserts a native
  `
` — the collapse state serializes and
  works in the read view for free; chevron rotates on open.

- **Design revision v2 sync** (the updated claude.ai/design spec):
  - **Toolbar recomposed**: sixteen primary tools (history · heading ·
    B I U S · colour + highlight · list + align · link/image/table); everything
    else folds into a **counted overflow** — the "⋯ +N" bordered toggle shows
    how many tools are behind it and stays pressed while open. The overflow is
    ONE horizontally-scrollable chrome-2 row with a mono "⌄ OVERFLOW" label
    (never a multi-row stack). Right cluster order: ⋯ +N · divider · Ask AI.
  - **Active state = ink fill**: pressed toolbar/bubble buttons now invert
    (ink background, paper glyph) instead of the accent wash; hover moves to
    `--rte-chrome-3`; toolbar glyphs render at 1.9 stroke (registry family
    stays 1.75 for menus/pickers).
  - **14 icons redrawn** to the revision (undo/redo corner-arrows, image,
    video, emoji, file, superscript/subscript, clear-format, capitalization,
    line-height, indents) + a dedicated `text-align` trigger glyph; titles
    carry shortcuts (Undo · ⌘Z, Bold · ⌘B, Link · ⌘K, …).
  - **Selects per the new spec**: toolbar triggers 13px/400 with fixed hug
    widths (heading 112px, font 106px, size 58px), no lead icons, pressed
    `.open` state while their popup is showing; popups use the 4px listbox
    shell with a mono group header, chrome-3 hover and accent-weak current.
  - **Colour picker rebuilt to the revision**: the classic 30-colour 6-column
    grid returns, with a bottom utility row — no-colour · white · black ·
    custom — plus a mono hex readout of the last pick; 236px shell,
    strong-border popover, accent ring on hover.
- **Real-browser QA fixes** (headed Chromium): letter-spacing picker had an
  unstyled bespoke popup class and lost the selection before applying — now
  reuses the styled shell and applies to blocks captured at open.

- **Side panel (the design's right rail)** — new opt-in module `side-panel`
  (`sidePanel: true`): **Outline** (live H1–H3 tree, click-to-scroll),
  **Comments** (selection-anchored `data-comment-id` marks + thread cards;
  `addComment()/removeComment()/get/setComments()` and
  `comment:add/remove/click` events) and **Versions** (manual snapshots via
  `saveVersion(label)`, one-click restore, `get/setVersions()`). The rail
  lives outside the content DOM; only the comment marks serialize.

### Changed
- **List & text-align pickers**: rebuilt as the design's labelled vertical
  menus — 186px pop with a mono header ("LIST TYPE" / "TEXT ALIGN") and
  12.5px rows (14px icon + label); the current value is an accent row. The
  old 34px icon tiles (whose ink-fill active rendered oversized and
  misaligned) are gone.
- **Bubble "⋮" more tools (design "Touch bubble · overflow menu")**: the
  selection bubble gains a trailing ⋮ that opens a 206px sheet — Highlight,
  Comment (⌘⌥M, shown when the side panel is on), Copy, and a
  danger-styled Clear formatting; 44px rows on touch. Size ceilings
  ESM/UMD 85→86 KB.
- **Form popups (design "Video popup" / "Import popup" / "Tag popup" cards)**:
  300px card, 14px padding, h3 titles (13.5px/600), 11.5px/500 labels, 30px
  inputs (13px), 30px upload button, 28px confirm/cancel buttons; disabled
  confirm buttons render the quiet chrome fill (`.button-disable`). The link
  popup's Apply matches at 28px.
- **Video popup states**: typing a URL hides the upload button (a URL and a
  file are mutually exclusive) and, for a recognised host/extension, shows an
  inline "Recognised host — validated again on insert" check; the file preview
  gets a bottom scrim so the white controls stay legible.
- **Import popup**: the bare file input is now a dashed drop/browse area that
  stays inert until a type is chosen ("Choose a type first…"), accepts drops,
  and renders the picked file as a compact row (icon tile, ellipsised name,
  `size · MIME` in mono, ✕ to clear). Unsupported combinations (PDF, Word,
  .xlsx/.xls) surface as an inline warning with Import held disabled — no more
  post-pick `alert()`.
- **Tag popup**: suggestions render as 24px pill chips.
- **Attachment tray (prompt layout)**: media with a preview renders as 48px
  tiles (16px close circle, play badge bottom-left on videos); files and
  context chips are 32px rows with a 20px icon tile. A pending upload shows a
  spinner ring in the icon's place; a failed one gets danger styling and an
  inline **retry** that re-runs the upload hook (replaces the old progress bar
  and "!" badge). The "+" add-menu gains a mono "Attach" header (186px, 12.5px
  rows).
- **Drag & drop (canvas)**: the drag-over state is now the design's 1.5px
  dashed accent frame with a "Drop to insert here" pill, plus a live **drop
  caret** (2px accent bar with a dot) tracking the pointer so the insertion
  point is visible before release. Dropping multiple files inserts **all**
  matching files (was: first only), and a drop nothing can handle shows a
  toast ("PDF files aren't enabled in this editor.") instead of failing
  silently.
- **Size ceilings**: ESM/UMD 78→82 KB, Core 78→79 KB, stylesheet 15→16 KB
  (brotli), covering the new popup states, drop UX and tray CSS.

### Fixed
- **Toolbar compressed by tall documents**: the wrapper's flex column let the
  chrome bars SHRINK when content overflowed — a long document squeezed the
  toolbar to a 15px sliver mid-edit. Chrome bars are now `flex-shrink: 0`
  (the content area is the scroll surface), and the bar is `position: sticky`
  in page-scrolling hosts so tools never scroll away (prompt layout's
  bottom bar opts out).
- **Sticky `styleWithCSS` (found by 300-case fuzz QA)**: applying any text or
  background colour flipped the document-wide execCommand styleWithCSS flag on
  and never back, so every LATER bold/italic serialized as
  `` instead of `/`. Both colour paths
  now reset the flag (regression-pinned in test/style-with-css.test.js).

- **QA sweep, round 2**: the demo composer's onSubmit destructured a
  `{ content }` payload that doesn't exist — the handler receives
  `(content, editor)` — so Send threw and never cleared (demo-only bug).
  Enter on a TRAILING empty list item now exits the list into a paragraph
  (Notion/Docs convention) instead of minting empty items; the Versions
  rail's "Current" row counts the LIVE document instead of the stale
  snapshot number.
- **QA sweep (5 findings)**: (1) a highlight applied while the live selection
  had collapsed silently armed a placeholder instead of colouring the text —
  the picker now recovers the last real selection first. (2) Bold no longer
  reports active inside a plain heading (queryCommandState mistakes the
  heading's computed weight for a bold mark; a real b/strong/inline-weight
  ancestor is now required). (3) **Tab nests list items** (Shift+Tab
  outdents) instead of tabbing focus out of the editor; table-cell Tab
  navigation is untouched. (4) The character counter recovers after the HTML
  source view: exit strips the source view's pretty-print whitespace from
  the document and the counter now counts the VISIBLE text (innerText).
  (5) The overflow tool row WRAPS on desktop instead of clipping its last
  tools behind a hidden-scrollbar row; touch keeps the single swipe row.
  UMD 86→87 KB, Core 80→81 KB.
- **Active submenu rows ignore hover**: a stale ink-fill pin flipped active
  picker rows (align/list) to a black tile on hover, and the select popup's
  current option lost its accent wash under a higher-specificity hover rule.
  Active/current rows now pin their accent state through hover, matching the
  toolbar's active-ignores-hover behaviour.
- **Toolbar no longer greys out on first load**: tools disabled themselves
  whenever the selection was outside the document — including before the
  first click, which made the editor look broken at rest. The bar now stays
  enabled (clicking a tool focuses the editor and applies at the caret);
  read-only and code view keep their own disable paths.
- **App-wide token sweep (audit-driven)**: one audit pass normalised every
  hardcoded style that duplicated or fought a token. Buttons: AI panel
  Accept/Retry/Discard and the word-diff Accept/Reject now run the spec's
  12px/500 · 28px · radius-sm (were `font:inherit` / 600 12.5px with 8px
  radii); legacy confirm/cancel drop `#181616`/`#2A2727`/700-weight for
  accent/ink/500; the stacked 36px input/button generation collapses to
  `--rte-ctl`/28px. Radii: every `6.9px`/`3.456px`/`3.46px` Figma artifact
  and bare 4/6/8/10px on component chrome now uses `--rte-radius-*`. Colors:
  bare hex duplicating tokens (`#fdecec`, `#111827`, accent rgba washes,
  `#ddd` table cell borders and the white popover arrow in JS inline styles)
  route through their tokens with fallbacks. Base-layer defaults drop from
  14px to the spec's 12/12.5px. Theming: portaled surfaces (AI bar, slash
  menu, toast) now copy the full token set — including `--rte-accent-ink-on`
  and `--rte-t` — so wrapper-scoped themes reach them; select-button's inert
  inline font overrides removed.
- **Selection chrome no longer stacks**: selecting text used to pop BOTH the
  formatting bubble and the AI "Edit selection" menu on top of each other.
  Per the design, selection now shows only the bubble, which leads with a
  "✦ AI" accent entry (shown when a model is wired) that opens the AI menu
  pinned at the selection. Auto-open is still available via
  `ai.openOnSelect: true`.
- **List picker sync**: the picker's active row now recognises checklists
  (its stale duplicate of getListType flagged `ul.checklist` as Bullet while
  the toolbar icon said Checklist).
- **Font weights (post-font-fix sweep)**: popup text now defaults to 400 —
  500 is opted in per control. Select options run the design's 12.5px/400
  (current row 500), find & replace actions 11.5px/500, Ask AI pill
  12.5px/500. Previously the popup reset forced 14px/500 over everything,
  which the never-matching toolbar selector had been masking.
- **Enter inside a code block**: browsers split every line into its OWN
  `
` — multi-line code was impossible and language detection never had
  enough signal. Enter now inserts a newline in the same block; Enter on an
  empty trailing line exits into a fresh paragraph (test-covered).
- **Toolbar fonts never applied**: the font reset targeted `.toolbar-container`
  but the DOM class is `.rich-editor-toolbar-container` — toolbar buttons had
  rendered in the browser's default font (Arial) all along. Size ceilings
  ESM/UMD 82→83 KB for the detector + font pass.
- **Ask AI first open**: with no caret in the document, the panel anchored to
  the EDITOR BOX and dropped below the whole document on the first click. It
  now opens right-aligned under the toolbar pill. A first-open positioning
  regression suite (test/popup-position.test.js) covers the AI bar, the
  video/image/tag/import popovers and the shared position helper.
- **More-toggle dots**: the ⋯ glyph's `[fill="currentColor"]` circles were
  painted paper by the ink-fill active recipe — invisible on the toggle's
  LIGHT pressed chrome. Re-inked while open.
- **Stuck pressed select**: re-showing a shared select against a different
  trigger left the previous trigger's `.open` chrome behind.
- **Block handles**: the ⠿/+ gutter now centres on the block's FIRST LINE
  (an H1's tall line box left it floating above the text) and no longer
  vanishes while the pointer crosses the gutter band on the way to the
  buttons (blocks are resolved by row when the target isn't inside one).
  Buttons grew to 22px with 16px glyphs.
- **Toolbar selects size to content**: heading / font-family / text-size
  triggers use auto width, so "X-Large" or a long font name widens the
  trigger instead of truncating to "X…".
- The overflow row's mono "⌄ OVERFLOW" label is gone — the second row now
  starts flush with its first control.
- Import popup no longer closes when clearing the picked file (the ✕ detached
  from the DOM before the click-outside handler ran).
- The popup upload button can hide again (`display` was pinned by an
  `!important` in a legacy rule); its idle look follows the design (solid
  border, chrome fill, grey icon — was dashed accent).
- **62 icons redrawn** to match the design spec exactly (bold, italic, color,
  ai sparkle, undo/redo, all alignment, list, table-operation and picker
  glyphs) — every registry entry now byte-matches the design's icon set.
- **Toolbar layout (UI 2.0)**: undo/redo lead the row on the left (no longer a
  pinned right cluster); when a model is wired, the AI trigger renders as a
  right-aligned **"Ask AI" accent pill** that never overflows into the hidden
  panel (it reuses the pinned-group reservation in `reflow()`).
- **Slash menu**: "Blocks" section header, bordered 26px icon tiles, per-block
  glyphs (H1/H2/H3, paragraph, blockquote, code-block) and markdown shortcut
  chips (`#`, `-`, `>`, ` ``` `, `---`, …) on the right of each row; active row
  uses the quiet chrome wash with an accent-tinted tile.
- **Colour picker**: curated 8×3 UI 2.0 palette (neutral ramp, saturated hues,
  soft washes) replaces the legacy web palette; "No colour" and "Custom…" are
  full-width menu rows under a hairline (white/black now live in the grid).
- **Table size picker**: 16px cells with accent-weak highlight and a mono
  "3 × 4" size label.
- **Find & replace**: the match-case toggle renders as a chip (accent when on).
- **Floating block/table bars**: 28px buttons per the bubble-metrics spec.
- **Mention menu**: two-line rows — name plus an optional handle/description
  line (`item.handle` / `item.hint` / `item.description`), 22px avatars.

- **Dark mode: native white buttons in find & replace.** A legacy
  `background: 0 0` let Chromium paint the UA's native button face (white) on
  the dark panel — Replace/Replace all now set `appearance: none` plus token
  backgrounds explicitly.

## [2.12.0] — 2026-08-06

**Editor UI 2.0** — a full visual redesign of every surface, from the
[YJD Editor Redesign](https://yjd.io) design spec. Same markup, same API — the
change is (almost) entirely tokens, so existing `--rte-*` overrides keep
working and custom themes inherit the new structure for free.

### Changed
- **New token palette (light + dark + auto).** Calmer neutral greys
  (`#15171c` ink on `#ffffff`, hairline `#e3e5ea` borders), a new indigo accent
  (`#5b5bd6` / dark `#7c7cf0`), and a refreshed content palette (near-black
  `#14161a` code blocks, quiet `2px` hairline blockquotes with no accent fill,
  `#2f5fd4` links). Dark mode is deeper (`#101216` surface, `#15181d` chrome).
- **Tighter geometry.** Radius scale is now 10 / 8 / 6 px (frame / popups /
  controls) plus a new 4px `--rte-radius-xs` for chips; controls are **30px**
  tall (was 32px) via the new `--rte-ctl` token, giving the classic 44px chrome
  bar. Softer, larger shadows (`--rte-shadow-lg` added for modal surfaces).
- **Popover recipe.** Every floating surface — dropdowns, pickers, bubble/table
  toolbars, slash & mention menus, find/replace, AI bar — now uses the same
  recipe: 1px `--rte-border-strong` frame, 8px radius, `--rte-shadow`.
- **Icon family at 1.75 stroke.** All ~64 registry glyphs render at
  `stroke-width: 1.75` (was 2) for a lighter, more even weight; a few core
  glyphs (upload, theme, horizontal-rule) were redrawn to match the family.
- **Status bar** is now 11px monospace (`--rte-mono`) on `--rte-chrome-2`, with
  tabular numerals for the word count.
- **Mobile swipe-row toolbar** grows controls to a 44px touch target
  (`--rte-ctl: 44px` under `hover:none`+`pointer:coarse`).
- **Text selection** uses the new `--rte-sel` accent wash (`::selection`).

### Added
- **Semantic state tokens** — `--rte-success`, `--rte-warning`, `--rte-info`,
  `--rte-danger-weak` (+ `-weak` washes for all), themed in all four palette
  blocks. Tag chips, import states and AI word-diff marks now use them, so they
  finally flip with dark mode.
- **New tokens**: `--rte-bg-2`, `--rte-chrome-3`, `--rte-hairline`,
  `--rte-ink-2`, `--rte-faint`, `--rte-sel`, `--rte-radius-xs`,
  `--rte-shadow-lg`, `--rte-ctl` (control height / density knob: 26 compact ·
  30 default · 34 roomy · 44 touch), `--rte-gap`, `--rte-ui`, `--rte-mono`.
- **Extra icon pack** (`lib/ui/icons-extra.js`, opt-in, tree-shakeable): 40 new
  glyphs in the same family for custom chrome — `save`, `share`, `history`,
  `download`, `print`, `unlink`, `heading-2/3`, `paragraph`, `blockquote`,
  `code-block`, `callout`, `toggle`, `columns`, `drag-handle`, `duplicate`,
  `delete`, `rewrite`, `regenerate`, `diff-view`, `replace`, `preview`,
  `settings`, `mention`, `comment`, `date`, `attachment`, `saved`, `error`,
  `info`, `offline`, `locked`, `presence`, `help` and more. Import
  `registerExtraIcons()` to add all (or a named subset) to the registry.

### Docs
- `docs/THEMING.md` rewritten for the new palette: full token tables (light +
  dark values), the metrics tokens, and the retired "not yet tokenised"
  exceptions list (semantic states are tokens now).

## [2.11.6] — 2026-07-24

### Added
- **Paste a video file** — pasting a video from the clipboard now inserts an
  inline `