Changelog
Track every improvement, fix, and feature as Blok evolves
`@bloklabs/server` is one C# implementation now, in two forms — The service that shipped in 1.11.0 as a Go binary is ASP.NET Core, and gained a second delivery with the port: install
Blok.Server.AspNetCorefrom NuGet and the same handlers run inside an ASP.NET Core app you already have —AddBlokServer(),UseAuthorization<T>(),MapBlokServer("/api/blok")— with no second process, port or container to operate, and your own authorization policy guarding uploads and previews rather than a second set of credentials.npx @bloklabs/serverandghcr.io/jackuait/blok-serverstill deliver the standalone host, now a self-contained .NET binary published for the same six OS/architecture targets and verified againstchecksums.txton first run. Routes, flags, environment variables, the ticket/CORS/rate-limit ordering, archive names and every response wire are unchanged, and a 58-case conformance suite runs the C# host against the contract the Go one froze, so an existing deployment sees the same service.IBlokAuthorizationis the permission seam for the document routes that come later; it is not consulted for uploads or unfurling. The packages still store no documents and carry no database-block or MySQL integration — that work follows this delivery migration.Added`@bloklabs/server` is one C# implementation now, in two forms — The service that shipped in 1.11.0 as a Go binary is ASP.NET Core, and gained a second delivery with the port: installBlok.Server.AspNetCorefrom NuGet and the same handlers run inside an ASP.NET Core app you already have —AddBlokServer(),UseAuthorization<T>(),MapBlokServer("/api/blok")— with no second process, port or container to operate, and your own authorization policy guarding uploads and previews rather than a second set of credentials.npx @bloklabs/serverandghcr.io/jackuait/blok-serverstill deliver the standalone host, now a self-contained .NET binary published for the same six OS/architecture targets and verified againstchecksums.txton first run. Routes, flags, environment variables, the ticket/CORS/rate-limit ordering, archive names and every response wire are unchanged, and a 58-case conformance suite runs the C# host against the contract the Go one froze, so an existing deployment sees the same service.IBlokAuthorizationis the permission seam for the document routes that come later; it is not consulted for uploads or unfurling. The packages still store no documents and carry no database-block or MySQL integration — that work follows this delivery migration.AddedAnswers pasted from ChatGPT and Gemini keep their structure — Those apps render an answer as a component tree rather than a document, and its two halves failed in opposite directions: the markup carrying meaning (a formula's TeX, a code block's language) sits in attributes and header chrome the sanitizer strips, while the markup carrying none (KaTeX's glyph layout, copy buttons) is made of tags it keeps. A pasted formula therefore arrived as roughly 870 nested layout spans flattening tox=a 2 ,, and a ChatGPT code block arrived twice, because its<pre>and the CodeMirror instance inside it both survived. Math is now replaced by the<span data-latex>the equation tool already whitelists, read fromdata-math-source,data-mathor KaTeX's own MathML annotation — the three shapes such a renderer leaves behind. A code block collapses to one<pre><code>with its newlines intact. Gemini prints the code language as text beside its copy and download buttons, soSQLused to land as a stray line above the block; it now rides the<pre>asdata-blok-code-languageand the Code tool adopts it, mapping the aliases models actually emit (js,py) to Prism ids and ignoring any it cannot resolve. Screen-reader speaker labels ("ChatGPT said:"), icon glyphs and the nodes Gemini itself flags as hidden no longer become content. All of it is verified against real clipboard payloads captured from public share pages rather than hand-written fixtures. There is deliberately no Claude branch: its share pages sit behind a bot check headless Chromium does not clear, and shipping a detector built on selectors nobody has verified is exactly what the fixture-provenance rule exists to prevent.FixedMarkdown copied out of an AI answer lost half its structure — The same apps' Copy buttons put markdown on the clipboard astext/plain, which is a different path into Blok, and five things were lost on it. A code fence or a second paragraph nested under a list item vanished without trace — numbered steps with code under each step, which is the single most common shape an assistant writes; nested content is now emitted as sibling blocks in document order, because Blok's flat list model has no way to indent a non-list block under an item, and items resuming after the interposed content carrystartso their markers do not restart at 1. Fence languages were passed through raw, so the ``js a model actually emits was not a Prism id: no highlighting, and a bogusjslabel; the normalizermarkdownToHtmlalready had now lives in one module used by every path — including the Code tool's HTML paste, which had grown its own copy — and knows the aliases models reach for (c++,c#,golang,zsh,console,docker,tex). Bold, inline code and strikethrough inside a list item rendered and were then silently saved as plain text, because the List tool allowed onlybr,a,bandi; it now spreads the same inline whitelist every other text tool uses, which also retires a fixedtarget: '_blank'rule that rewrote same-page links to open in a new tab on save. A parser throw made the paste do nothing at all, escaping past the plain-text fallback — only the import and conversion are wrapped now, since a throw after the blocks are inserted must not report failure or the text is pasted twice. And a blockquote-only answer arrived as literal>lines: there was no blockquote signal, and the new one is anchored to the line start with a mandatory space, which structurally excludes->,=>,5 > 3and>>>` prompts.ChangedThe Go implementation is gone, and the tag ships the C# one — The Go source, its build and its release wiring were removed only after the dual-target conformance gate passed unwaived, so the C# host inherited a proven contract rather than a promise. The tag workflow now tests and formats the .NET 10 solution, packsBlok.ServerandBlok.Server.AspNetCore, proves the produced NuGets by consuming them from an isolated feed, builds the six self-contained host archives plus checksums, smoke-tests both the native archive and the linux/amd64 image — including that a public unauthenticated configuration still refuses to start — publishes the NuGet, GitHub and GHCR outputs, verifies each is observable, and only then publishes the GitHub release, which is created as a draft. The NuGet credential is minted over GitHub OIDC immediately before the push rather than held as a long-lived secret, so it cannot outlive the build that uses it. The docs release event therefore cannot advertise a package, archive or image that is still missing.ChangedTwo gates that only CI could see — The repository carries no.editorconfig, sodotnet formatfell back to its four-space default in CI while the C# is written two-space against a developer's own home settings, and the check was red onmainfrom the day it landed — 12689 whitespace complaints across every file, and every step after it in the job never ran. The .NET tree now carries its ownroot = trueconfig, so a laptop and a runner agree. In the same family: a conformance case cannot narrow anitthat is already narrowed, and the two that need the ordinary binary now take their own binding, which keeps the whole file skipped when the harness has not built a server.`@bloklabs/presets` — A new package of ready-made uploaders, so
config.uploaderstops being something every project writes from scratch:supabaseStorage,presignedStorage(S3-compatible — the browser PUTs straight to a signed URL your own backend mints, so credentials never reach the page),cloudinaryStorage,fetchStoragefor any endpoint that speaks Blok's documented upload wire contract, andindexedDBStoragefor demos. Zero runtime dependencies: a vendor client is passed in, never imported, so your own auth session applies and the preset is not pinned to a client version. Buckets and Cloudinary resource types resolve per asset kind rather than per tool, which is whatUploadContextactually carries — audio rides Cloudinary's video pipeline by Cloudinary's own design. OnlyfetchStorageandcloudinaryStorageimplementuploadByUrl; the other three leave it undefined on purpose, so Blok's URL-verbatim fallback applies. That is deliberate, not an omission — a browser cannot fetch a third-party URL, and a pass-through stub would type-check identically while silently reporting a re-host that never happened.indexedDBStorageexists because Blok's built-in fallback (URL.createObjectURL) does not survive a reload, so an unconfigured demo looks fine until the page refreshes and every image breaks; it stores the bytes and returns a stableblok:asset/<id>reference, andresolveBlokObjectUrlturns that back into ablob:URL — it mints a fresh one on every call with no cache and no revoke, so a repeatedly re-rendered view has to revoke its own. A failed upload names the preset that produced it, so a 403 is traceable to the signer, the CORS rule or the PUT that actually failed. The uploader contract types are now exported from@bloklabs/core:BlokUploader,UploadContextandUploadedAssetwere declared but reachable from nowhere, so a consumer writing an uploader got TS2305 and hand-copied the shape.Added`@bloklabs/presets` — A new package of ready-made uploaders, soconfig.uploaderstops being something every project writes from scratch:supabaseStorage,presignedStorage(S3-compatible — the browser PUTs straight to a signed URL your own backend mints, so credentials never reach the page),cloudinaryStorage,fetchStoragefor any endpoint that speaks Blok's documented upload wire contract, andindexedDBStoragefor demos. Zero runtime dependencies: a vendor client is passed in, never imported, so your own auth session applies and the preset is not pinned to a client version. Buckets and Cloudinary resource types resolve per asset kind rather than per tool, which is whatUploadContextactually carries — audio rides Cloudinary's video pipeline by Cloudinary's own design. OnlyfetchStorageandcloudinaryStorageimplementuploadByUrl; the other three leave it undefined on purpose, so Blok's URL-verbatim fallback applies. That is deliberate, not an omission — a browser cannot fetch a third-party URL, and a pass-through stub would type-check identically while silently reporting a re-host that never happened.indexedDBStorageexists because Blok's built-in fallback (URL.createObjectURL) does not survive a reload, so an unconfigured demo looks fine until the page refreshes and every image breaks; it stores the bytes and returns a stableblok:asset/<id>reference, andresolveBlokObjectUrlturns that back into ablob:URL — it mints a fresh one on every call with no cache and no revoke, so a repeatedly re-rendered view has to revoke its own. A failed upload names the preset that produced it, so a 403 is traceable to the signer, the CORS rule or the PUT that actually failed. The uploader contract types are now exported from@bloklabs/core:BlokUploader,UploadContextandUploadedAssetwere declared but reachable from nowhere, so a consumer writing an uploader got TS2305 and hand-copied the shape.Added`@bloklabs/server` — A new Go sidecar (npx @bloklabs/server, or theghcr.io/jackuait/blok-servercontainer image) that handles file uploads and link previews, so a consumer writes no backend code for either.POST /uploadtakes a file,POST /upload-by-urlre-hosts a pasted remote URL, andGET /unfurlreturns the OpenGraph / Twitter-card metadata a bookmark card is built from. Both routes that fetch a consumer-supplied URL go through one SSRF-guarded outbound client — the only place in the service an outbound request happens at all, held there by a static test that fails the build if any package outside it constructs an HTTP client, with a single documented exemption for the S3 driver, which talks to the operator's own endpoint. Uploaded bytes land in a local directory or any S3-compatible bucket, signed with SigV4 against the standard library so the binary carries no AWS SDK; addressing style auto-detects, because path-style breaks new AWS buckets and virtual-hosted style breaks MinIO and R2. Three access modes —none,proxy,ticket— are enforced by startup interlocks rather than warnings: a mode that trusts every caller refuses to start on anything but a loopback bind, a public service refuses to start without an origin allowlist, and each refusal names the flag to change and spells out what the address really opens (:4000reads narrow and is not). Access passes are verified against exactly one algorithm, which removes the algorithm-confusion family by construction instead of by configuration. The service stores no documents: it may own what passes through it — the bytes being uploaded, the page being fetched — and never your records, which is an ownership line rather than a missing feature. Two limits are stated plainly on the/serverdocs page instead of buried: link previews reach roughly 70% of sites and the rest degrade to a plain link, and the S3 signatures are covered by tests but have not been checked against a real bucket.AddedCross-block text selection — Dragging across blocks now selects the characters under the pointer instead of whole blocks. Two things had to change together, and either alone would have done nothing: the old handler deliberately converted any cross-block drag into a block selection, and every engine clamps a drag-driven selection to the anchor's editing host — and each block's tool element is its own editing host, so the range could not grow past the first block by itself. The spanning range is therefore asserted outright and re-asserted and re-applied whenever something rewrites it. Everything that consumes such a range learned to split it per host: copy and cut serialize each host's slice, becauseSelection.toString()clamps in Chromium and WebKit and a native copy dropped every block after the first; Backspace, Delete, typing, Enter and paste replace exactly the range as one undo entry; the mark engine splits before applying, since running whole on a cross-host range deleted the selected text instead of marking it, making cross-block ⌘B destructive; and a table cell no longer steals the caret back and repaints its own rectangle over the selection. Painting is substituted only where an engine cannot paint a spanning range itself — Chromium can, and its::selectioncovers the line box where::highlight()covers only the text box, so substituting there shrank the band by a fifth and opened gaps between lines. It works in Firefox, which Notion's own implementation does not. Escape promotes the text selection to a selection of the same blocks; Shift+Click and Shift+Arrow keep their block-level semantics; a drag spanning a block with no editable content still selects whole blocks. Two deliberate contract changes come with it, both aligning selection with the shipped hover behaviour: a lasso over columns selects the blocks inside the columns rather than the column list, and a drag from one column into another selects the run it spans instead of nothing.AddedBlock controls on either side —config.toolbarPosition: 'left' | 'right'(live, viatoolbar.setPosition()) moves the plus button and drag handle between the editor's inline-start and inline-end gutters, and moves the reserved width with them — the start gutter collapses, an equal one opens at the end, and the text reclaims the space the controls used to occupy. Logical tokens throughout, so RTL mirrors for free. CSS only gets the layout halfway: four JS paths hard-coded "the bar grows leftwards" and are mirrored too — the viewport clamp (a ceiling on the offset now, not a floor), the nested-content nudge (a list item's right edge *is* the block's, so the nudge that closes the gap on the left would open one on the right), the callout-emoji overlap suppression (the emoji is a start-edge affordance; with the bar on the other side the controls stay visible), and the block-settings menu, which is placed beside its trigger and would otherwise open straight over the block it belongs to. Before this, a host that wanted the controls out of the reading path had no lever but hiding them entirely withhideToolbar.AddedDev override seam — Every published@bloklabs/coreentry now consultsglobalThis.__BLOK_DEV_OVERRIDE__before falling back to its bundled implementation, so a local build can be injected into a running app by Blok's own developer tooling. It is a passive, in-realm read: nothing is fetched, evaluated or resolved from a URL, and the seam never consults localStorage, meta tags, URL parameters or DOM attributes, so it grants nothing to an attacker who cannot already run script in your origin. Payloads that are DOM nodes are rejected, which closes DOM clobbering, and a payload that throws on property access (a cross-originWindowProxywill) warns once and falls back to the bundle rather than crashing the chunk at module evaluation. The editor root carriesdata-blok-version, so what is running is inspectable. If you want the branch out of your bundle entirely,./dist/*is now an exported subpath and the docs give the alias — as an exact-match regex, because a plain string alias key also prefix-matches every subpath, and each entry (/tools,/full, …) needs its own pair. The extension that drives the seam is unpacked, Chrome-only tooling that lives in this repository; it is not published and consumers never install it.Fixed`onChange` fired late, or not at all — The change pipeline restarted its 400ms batch window on every mutation, so the first change to an idle document waited out the whole window before any host UI could react, and — worse — sustained typing never closed the window at all: any gap under 400ms pushed delivery further out, so a user typing a paragraph got zeroonChangecalls until they paused. The window now opens on the first change and is never extended.onChangeleads it on the next microtask (the same frame the user typed in, with one tick of deferral so a multi-block paste is still a single call) and everything after is coalesced into one trailing call, bounding latency at one window.onSavekeeps the trailing edge only — serializing the whole document is too expensive to front-run a batch with — so its cost is unchanged at one serialization per window. Read-only and destroy are re-checked at delivery, since a queued microtask, unlike a timeout, cannot be cancelled bydestroy().FixedSelection beside a nested block — A lasso drawn in the left gutter beside a table nested in a toggle heading selected the whole toggle section instead of the table, because selection decided which block owns a row by a different rule than the block toolbar does: nested blocks were excluded from lasso candidates outright, the endpoint resolvers walked to the top-level block, and the per-block horizontal test measured the content column while the lasso deliberately extends into the gutter. Selection now resolves a row through the same rule the toolbar already uses. In the same family: a flat-index range selected every block stored between the endpoints, so a container *and* its children; the drag range was toggled per hover, so out-of-order moves left holes; the band was clamped to the holders under the first throttled mousemove, so a fast drag silently dropped every row above it; Shift+Arrow stepped by flat index and walked into the next container; and one keystroke inside a nested block ran the pipeline once per ancestor, so Shift+ArrowDown in a toggle extended by two rows per press. A lasso that ends the drag also stands the hover down, so a queued mousemove can no longer yank the toolbar onto the last block a frame after mouseup and swallow the user's next deliberate hover. Underneath all of it,throttledropped any call arriving in the dead zone left behind by a trailing invocation — the call was lost for good, which is why a fast lasso flick stranded the band one row short of the pointer, permanently.FixedEmpty-block placeholders displaced the caret — An empty block's placeholder is generated content at the start of the first line box, and left in normal flow it consumes real inline advance, so the caret was painted past the placeholder text — 315px to the right in a paragraph, 118px in an h2 — and the block read as if the placeholder were something the user had typed. It needs the caret's anchor to own a layout box, which is why it looked intermittent; a block holding the mark engine's pending-format zero-width space is one such case, and still counts as empty. Every placeholder gated on the empty mark now paints its text while claiming zero advance. Media captions are deliberately left in normal flow: they are gated on:empty, where the caret always parks at the line start anyway, and a zero-width box there would anchor at the alignment point and spill a centred or right-aligned caption to one side. Separately,caret/focus.tsoverwrote a correctly placed caret with an unsetRange, which spans(document, 0)and drops the caret out of the element entirely.FixedA bookmark that could not be previewed — The same block showed an error placeholder right after a failed paste and an ordinary card after a reload, because the error state never reached saved data. A failed preview now degrades to a plain link on both paths, which is what the reload path already rendered. Roughly 30% of sites publish no preview data to anything that is not a browser, so this is the ordinary case rather than a fault — there is no notifier and no distinction drawn between "the service is down" and "this site publishes nothing", since both end as the same link and a reader can act on neither.FixedAudio player card — Descenders in the title and artist lines were sliced flat.text-overflow: ellipsisforcesoverflow: hidden, which clips at the padding box, and at a line height of exactly 1 that box is shorter than the font's content area — 3.02px of descender ink against 1.5px of room, measured in Chromium. Both lines now use the same line-height token the file-name row already carries.ChangedRelease and CI wiring — Nothing in this repository iterates workspaces automatically, so a new package missing from a list silently drops out of that step — and there are seven such lists, several of which sat red onmainwhile@bloklabs/presetswas registered in some of them but not the rest. Both new packages are now registered across all of them — version lockstep, the publish list, the build task graph, their own CI test steps, the tests that pin both of those graphs, the docs-deploy gate that holds the deploy until npm has propagated, and the package-metadata law, which requires a real README plus keywords, homepage, repository and bugs, checked in both the source and the packed tarball. The server's binaries and container image ship from a tag-triggered workflow rather than from CI or fromrelease.mjs, since a maintainer's laptop has no Go toolchain, no Docker daemon and no registry credentials, and the npm wrapper resolves its download from the release matching its own version — so binaries ship on every tag, ornpx @bloklabs/server@<new>would 404. Drift laws were added where a mirror can rot silently:@bloklabs/presetshand-copies the uploader types and its own option interfaces into its published.d.ts(a published declaration cannot import outside its own tarball, and a zero-dependency package cannot pull in core's types), so a compiler-API law now fingerprints every one of them against its real source, checks export parity in both directions, and fails on any mirrored type nobody remembered to cover — the same rot that once costtypes/data-attributes.d.ts17 of its keys.ChangedDocs — New/presetsand/serverpages, both linked from the navigation, both localized in English and Russian down to the table cells (the page chrome reuses existing keys rather than adding new ones), and both covered by the SEO and prerender manifests their route trees are checked against./serverleads with the path that runs no service at all, and states its limits on the page rather than in a footnote — including that files served from the local directory should sit on a different origin than the app, since a file someone uploads is served by your domain and can act as if it were your page. A new docs page documents the dev override seam, its threat model and its opt-out.SECURITY.mdnow commits to a response window before the first report rather than after it: acknowledged within five business days, fixed or publicly advised within ninety. The design documents behind the backend service, the storage presets, the editor wiring and the database-block query shape live indocs/plans/.- AddedToggle heading adoption — "Turn into → Toggle heading" now adopts the heading's section, matching Notion: every following sibling up to (but not including) the next heading of the same or higher rank becomes a child of the new toggle. Before, the section was left stranded outside and the content had to be hand-fed into the fresh toggle one block at a time. Descendants of adopted siblings ride along rather than being reparented directly, a heading inside a column adopts only within that column, and a source that is already a toggle keeps exactly the children it had. The adoption runs inside a move transaction, so undo restores the section — a bare reparent loop left those writes invisible to history and undoing the convert stranded the section under a plain heading. Multi-select convert opts out, so each selected block becomes its own toggle instead of earlier conversions swallowing later ones.AddedToggle disclosure arrows — The arrows now read as clickable. At rest the chevron was a fixed 12px glyph whose hover pill only appeared once the pointer was already inside the 28px square, so there was nothing to tell a user the arrow was interactive. The chevron scales with its title's font size, so heading arrows grow with their level while toggle lists keep the historical 12px; the pill tints on hover anywhere over the title row rather than over the arrow alone; and a localized Expand/Collapse tooltip is read from the state-synced
aria-label.FixedNested block menus — A block inside a toggle list or toggle-heading section could never show its own menu, and a table nested in a section had a menu that could not be caught: hovering cell content anchored the toolbar to the table, but the moment the pointer crossed onto the cell padding, the section's gutter strip, or the toolbar icons, resolution bounced up to the toggle parent and the menu jumped out from under the cursor. Hover and touch now share one resolver in which the deepest block wrapper under the pointer owns the toolbar. Cell blocks still anchor their table and a child-toolbar container's first child still anchors the container; a pointer in a container's own chrome descends by line to the child whose band contains it; hover detection stands down entirely over the toolbar; and the page-margin fallback is band-, depth- and x-aware, so the margin beside a nested table anchors the table rather than the whole section.FixedAccessible names for icon-only controls — An icon-only popover item now takes its accessible name from its hint title. A hint is wired viaaria-describedby, which describes a control but never names it, so the entire inline toolbar — bold, italic, link, marker, underline, strikethrough, inline code — was nameless; the fix is central, so every icon-only popover item is repaired. Colour swatches are named from the label they already formatted (background swatches had no name at all and text swatches all announced as "A") and expose applied state viaaria-pressed. Captions on image, video, file and embed are named from their localized placeholder and marked multiline, and droprole="textbox"in read-only where they are static text; the embed iframe has a title. The file card no longer nests an editable textbox inside its button. No new i18n keys — every label reuses one already present in all 71 locales.FixedList and popover semantics — The list wrapper carriesrole="list"; every item declaredrole="listitem"but nothing ever declared the list, leaving every item in the editor an orphan. Toolbox section headers wererole="separator"children of arole="listbox", which may own only options and groups, and are now presentational. A popover is only stamped as a menu or listbox when it actually has default items — the link editing field and the block colour submenu are built from a single Html item and were advertising a menu with no menu items.FixedTable and database semantics — Heading cells exposecolumnheader/rowheaderroles, matching what the view renderer already emits as real<th>(the tag itself cannot be swapped: heading toggles repaint attributes on existing cells, and rebuilding them would destroy elements that host mounted child blocks and are held by reference across selection, merge, resize and corner-drag state). The header row/column toggle is a realrole="switch"button witharia-checkedand Enter/Space. Add-row, add-column and the row/column grips are named, focusable buttons with keyboard activation — they were pointer-only, so a keyboard user could not add or reorder anything. Database view tabs are a real tablist with roving tabindex andaria-selected.FixedEscape no longer strands focus — Escape pressed inside the toolbar left focus on<body>. The document-level handler stopped propagation while still in the capture phase, so the toolbar's own bubble-phase handler could never restore the caret; it now stands down for targets inside the toolbar. The inline-toolbar branch stops propagation too, so one Escape no longer both closes the toolbar and enters navigation mode. Modal dialogs return focus to the element that opened them rather than trustingactiveElement, which fixes focus loss on WebKit — it does not focus a<button>on click.FixedContrast — The grey text token measured 4.55:1 on white, clearing AA by 0.05 and therefore failing on every tinted surface (4.28:1 on secondary background, 3.95:1 under hover). It is darkened, along with links, inline code — now its own token, so it stops borrowing the persisted marker red — and embed text that sat on the decorative tier. The Prism dark palette was entirely dead: every rule was gated on a.darkclass that nothing in Blok sets, so dark code blocks rendered the light palette with punctuation at 1.54:1. Database column pills opt out of the marker palette onto a dedicated on-pill colour, because every light--blok-color-*-textfails AA on its own background and that palette is persisted into saved documents.ChangedAccessibility suite — Coverage was two copy-pasted axe scans on the table tool. It is now a layered suite running on Chromium, Firefox and WebKit: axe scans of all 20 block tools in edit and read-only, editor chrome (toolbar, toolbox, block settings, inline toolbar, nested popovers, tooltips, link field), keyboard and focus behaviour, live-region announcements, and regression specs pinning each audited defect. No rule is waived anywhere, every scan is preceded by a visibility assertion so a scoped scan cannot pass vacuously, and a static architecture law pins names, role-gated ARIA state, decorative icons and a bidirectionala11y.*i18n ledger. Two defects remain pinned with reasons in place: navigation mode exposesaria-currentbut not a selection role, and the inline toolbar still intermittently strands focus. The nested-block hover spec runs on all three engines, since CI's matrix never executes chromium-default and the spec would otherwise not run in CI at all. Framework adapters —
useBlockstakes{ within: blockId }in React, Vue and Angular, so a container block re-renders only for changes inside its own subtree; unscoped, a page of N containers turned one keystroke into N re-renders. It bounds reactivity, not reads — the returned API still sees the whole tree — and a change whose block can no longer be placed (a removal emitting after the fact) counts as in-scope, so a container can never be left rendering a dead child.childContentAttributesapplies per-child decoration one level in, on each child's[data-blok-element-content]wrapper, which is where a numbered rail or connector line has to align; core's decoration law always blessed it, but only the holder was reachable, so containers hard-coded Blok's wrapper chain in their own CSS.toolbarAnchorRef(React/Vue) andctx.setToolbarAnchor(Angular) answergetToolbarAnchorElementfrom inside the component tree instead of forcing a self-invented data attribute and aquerySelector; the ref outranks the declared hook only while it holds a mounted element, so the toolbar is never positioned against a detached node.AddedFramework adapters —useBlockstakes{ within: blockId }in React, Vue and Angular, so a container block re-renders only for changes inside its own subtree; unscoped, a page of N containers turned one keystroke into N re-renders. It bounds reactivity, not reads — the returned API still sees the whole tree — and a change whose block can no longer be placed (a removal emitting after the fact) counts as in-scope, so a container can never be left rendering a dead child.childContentAttributesapplies per-child decoration one level in, on each child's[data-blok-element-content]wrapper, which is where a numbered rail or connector line has to align; core's decoration law always blessed it, but only the holder was reachable, so containers hard-coded Blok's wrapper chain in their own CSS.toolbarAnchorRef(React/Vue) andctx.setToolbarAnchor(Angular) answergetToolbarAnchorElementfrom inside the component tree instead of forcing a self-invented data attribute and aquerySelector; the ref outranks the declared hook only while it holds a mounted element, so the toolbar is never positioned against a detached node.AddedView —renderLatexandcreateLatexRendererare exported from@bloklabs/core/view. The KaTeX chunk was already in the bundle — the code tool, the equation inline tool and the markdown importer all use it — but no entry exported the renderer, sotypes/view.d.tstold hosts to addkatexas a second dependency of their own. Both apply the options Blok itself trusts for untrusted input (trust: false, cappedmaxExpand/maxSize, no throw on malformed math), and the CSS injection is skipped where there is nodocument, so SSR and workers get identical markup.inlineRenderersis synchronous, socreateLatexRenderer()awaits the load once and hands back a sync renderer — the async function alone would stringify as[object Promise].Fixed`insertChild({ caret })` — The caret was lost for a portal-rendered child. Placement ran synchronously after the insert, but a React/Vue/Angular child'srender()returns an empty host and commits its editable a frame later, so the block was not yet focusable andCaret.setToBlocktook its only other branch: clear the selection, blur, highlight the block. It was permanent, because nothing re-ran the placement. It now re-applies once the child's holder produces an input, one-shot, and stands down if focus moved away in the meantime.ChangedAdapter parity — The per-child decoration pass was triplicated across the three adapters and is now one implementation. Three architecture laws pin the new surface (child-decoration,toolbar-anchor-ref,useblocks-scope), and the view entry gained an export ↔ declaration drift check — the guard whose absence letrenderLatexship undeclared.Container tools — Five things a container block used to hand-roll are now declared.
static childTools = { allow?, deny? }lets any container state which tools may be its direct children, enforced by core on insert (a disallowed tool is demoted toallow[0], so Enter always produces a block), on a cross-boundary move (refused) and in the toolbox (hidden) — the selective, insert-aware counterpart toownsChildren, and the generic form of the Table-onlyrestrictedTools.data-blok-keyboard-ownermarks a subtree whose keyboard belongs to the tool: block-level and editor-level keydown/input handling stand down inside it, tag-agnostically, replacing per-keystopPropagationhandlers.BlockAPI.insertChildgained anoptionsargument with the same vocabulary as the adapters'useBlocksinsert (focus, caret, id, tunes, replace), threaded throughinsertInsideParent.AddedContainer tools — Five things a container block used to hand-roll are now declared.static childTools = { allow?, deny? }lets any container state which tools may be its direct children, enforced by core on insert (a disallowed tool is demoted toallow[0], so Enter always produces a block), on a cross-boundary move (refused) and in the toolbox (hidden) — the selective, insert-aware counterpart toownsChildren, and the generic form of the Table-onlyrestrictedTools.data-blok-keyboard-ownermarks a subtree whose keyboard belongs to the tool: block-level and editor-level keydown/input handling stand down inside it, tag-agnostically, replacing per-keystopPropagationhandlers.BlockAPI.insertChildgained anoptionsargument with the same vocabulary as the adapters'useBlocksinsert (focus, caret, id, tunes, replace), threaded throughinsertInsideParent.AddedInline tools —InlineToolConstructable.hydrate(root)is a declared contract, called byBlockafter render, after an in-placesetDataand afteronPaste. Whatever a hook writes is markeddata-blok-mutation-free, so re-rendering derived markup is not an edit.AddedView —blocksToHtmland<BlokView>acceptinlineRenderers: tag-keyed, post-sanitize, output inserted verbatim — the inline counterpart ofrenderers. A DOM-free render can plug inkatex.renderToStringor a mention chip without Blok shipping either.AddedBlock tree —{ blocks: [...] }is now a spec node (BlockRunSpec), valid at the root or as a child of a tree node. A migration holding an already-flat saved document can splice it verbatim: ids are kept, only un-parented blocks are re-parented onto the enclosing node, and only those join itscontent. Passing a pre-flat block as a tree node throws instead of silently dropping its parent/content links.FixedInline equations — A KaTeX span's markup is derived fromdata-latex, and the sanitizer dropped its tags while keeping their text, soE=mc^2was persisted asE=mc2E=mc^2E=mc2. What was supposed to hide that — re-rendering on load — never ran:EquationInlineTool.hydrate()had zero call sites repo-wide, so equations went inert on every reload, in the editor and not just in the view. The sanitizer rule now rewrites an equation span's content back to its source on both the DOM and the parse5 pipeline, so new saves are clean and a load heals documents that already carry residue.htmlTextContentreads a mark's source, so previews, outline and search stop reading rendered fragments.Fixed`onChange` arming — The documented "handler presence arms the change pipeline" contract was false: core defaultedonChangeto a no-op unconditionally, so the gate could never disarm and all three adapters' careful handler-presence omission was pointless. Hosts were passing dummy handlers to arm a pipeline that was already armed — and anonSaveone also forces a full serialization per change batch. The injection is gone, so the contract holds as written.FixedPublished types —types/data-attributes.d.tswas hand-transcribed and had drifted: 17 attributes missing (includingnestedBlocks, the container slot every nesting tool's stylesheet targets) and one phantom key the runtime never had. It is now generated from source and any drift fails an architecture test. The ReactBlokViewPropswas also missingclasses.ChangedDependencies — postcss, brace-expansion, fast-uri, ip-address and undici bumped across the root and docs workspaces.Superscript / subscript — A new inline tool takes the tenth slot in the inline toolbar, bound to ⌘/Ctrl+Period and ⌘/Ctrl+Comma. The two modes are mutually exclusive, so applying one clears the other. Shipped with glyphs drawn into the shared inline-toolbar type system, translations in all 69 locales, and docs.
AddedSuperscript / subscript — A new inline tool takes the tenth slot in the inline toolbar, bound to ⌘/Ctrl+Period and ⌘/Ctrl+Comma. The two modes are mutually exclusive, so applying one clears the other. Shipped with glyphs drawn into the shared inline-toolbar type system, translations in all 69 locales, and docs.AddedToolbox — Slash-menu entries are grouped under labeled sections, so a long tool list is scannable instead of a flat run of items. Each entry declares its own section.AddedTool contract — Blocks carry creation provenance (user/load/api/paste/convert/replay/probe), so a container can tell an author's gesture apart from a document load, a refetch or an undo replay. Enter's container-escape became a per-tool declaration instead of a hardcoded list of Blok's own tool names, so a custom container keeps Enter inside itself without an editor-globalonEnterhook.insertInsideParentandBlockAPI.insertChildtake an optional tool name, making an appended typed child one atomic operation and one undo entry.AddedFramework adapters — The React, Vue and Angular block spec gained a general statics passthrough (toolbar anchor,ownsChildren,conversionConfig, the new Enter policy), an api handle, child-tree reactivity, per-child decoration, and anonMountedsignal backed by ablock:childrenMountedevent. Handler presence is runtime-settable throughapi.handlers.set(), so passingonEnterat all no longer permanently decides Enter's semantics.AddedEditor — A new opt-incaptureClicksBelowEditorplaces the caret in the last block when the host clicks empty space below the editor. Off by default; registered as a config key in the React and Vue adapters too.AddedLink — The link field sizes itself to its content, capped at the previous fixed width, and its create, error and edit states were polished.FixedNesting —setBlockParentno longer lets a container on the block's own ancestor or descendant chain veto a reparent; an enclosing container claiming a holder used to leave model and DOM permanently divergent (Enter inside a callout nested in another container), and a descendant doing the same nested every appended child inside its predecessor.mountChildBlocksnow reclaims a holder stranded in any ancestor container, re-mounts it at its model position rather than last, and preserves the caret across the adoption. Depth indentation moved from an inline margin with a hardcoded exemption list to a depth multiplier resolved through--blok-block-indent-step, so a container tool declines the indent with ordinary CSS and no!important.FixedBlock API — Every handed-outBlockAPIis live, sogetChildren()can no longer answer[]for a populated container andsetParent/insertChild/moveChildcan no longer silently no-op.api.blocks.update()prefers a tool's in-placesetDatawhen there are no tunes to apply, so it stops composing a replacement block that destroyed the previous one's portal and left the holder permanently empty.FixedInline toolbar —destroy()threw and abortedblok.destroy(), leaking listeners in every module torn down after it:hide()emitsClosedsynchronously, the handler then ranclose(), which nulled the popover mid-teardown. The reference is now detached before hiding.FixedPopover — Control-less HTML items (the new toolbox section headers) are no longer keyboard focus stops, so arole="presentation"header can't steal initial focus, shift every Arrow/Tab, or be pointed at byaria-activedescendant. Sibling active states refresh after an item is activated, and clicking the item that opened a popover now does nothing instead of reopening it.FixedList — Tab/Shift+Tab moved the model but not the render: both handlers wrote depth into the tool's live data before callingapi.blocks.update, whose in-place diff then saw no change, sosave()and the DOM silently disagreed.FixedEvents and data — Keydown from a native form control a tool renders is no longer claimed by the editor. The toolbox merge and thesave()extraction stop mutating tool-owned objects, so a toolbox entry carrying data no longer throws on a frozensave()result. A load is not an edit: a block arriving without a timestamp is no longer stamped at construction, so a save round-trip equals the document it came from.FixedAdapters — The portal registries reject a teardown from a superseded instance, so a same-id re-register survives a late destroy; Vue additionally defined one wrapper component per tool *type*, so a re-register patched the superseded instance and rendered stale data — the wrapper is now per block instance. A React element toolbox icon serializes instead of rendering as[object Object], and the imperative handle keeps the controlled baseline in sync so restoring a draft afterclear()is no longer swallowed as an echo.FixedStyles — The icon stroke is scoped to Blok's own icon markup instead of every path in the subtree. The column floor moved to--blok-column-min-widthin CSS, and the static-gutter attribute plus the block-padding tokens are now declared.ChangedBuild —scripts/build-angular.mjsderived its adapters contract from a hand-copied list that silently drifted whenever a staged module gained an import; it now derives it fromsrc/adapters.ts, and the staging law test walks the same graph so drift fails at test time instead of build time.ChangedTests — 23 red e2e tests were root-caused rather than weakened: three were real product bugs (fixed above) and four were stale specs asserting behaviour that later commits deliberately changed. A leaked 600ms language-detection debounce in the code-tool unit tests was also cancelled, removing a load-dependent flake.Embed — A stored generic embed the host hasn't allowed to be framed now renders as a clickable link card instead of the inert "No embed link" state, so the URL stays visible in both read and edit views and can never be silently lost. A new
linkPaste.allowedEmbedOriginshostname/wildcard trust list gives hosts fine-grained control as a middle ground before the all-or-nothingallowGenericEmbedflag. Tampered stored data stays fully inert, and no new iframe paths are introduced.AddedEmbed — A stored generic embed the host hasn't allowed to be framed now renders as a clickable link card instead of the inert "No embed link" state, so the URL stays visible in both read and edit views and can never be silently lost. A newlinkPaste.allowedEmbedOriginshostname/wildcard trust list gives hosts fine-grained control as a middle ground before the all-or-nothingallowGenericEmbedflag. Tampered stored data stays fully inert, and no new iframe paths are introduced.FixedEditor — Queries for a block's first editable element now skip mutation-free markers such as a list item's bullet span, closing the remaining "marker ghost" sites where Enter could write an item's own HTML into the bullet and the toolbar centred on the marker's box instead of the text. An architecture test now enforces the guard on everycontenteditableselector in the codebase.- FixedCallout — Enter can leave the panel again. Previously it could only ever add another line inside, so every press stamped one more empty paragraph into the callout; those blanks are saved with the document, and the callout reloaded with its text pinned to the top of a panel padded out by invisible lines. Behaviour now matches Notion: Enter adds a line inside, Enter on an empty last line steps out. A callout nested in a column hands that block to the column rather than the document root, the exit block is saved in the position it renders in, and the whole exit is a single undo/redo step. Toggles and columns keep their existing behaviour.
- FixedCallout — The panel's vertical inset now reads its own
--blok-callout-padding-blocktoken (flat 5px default) instead of riding--blok-block-padding-top/-bottom, so a host's compact-rhythm override no longer collapses the callout card onto its text. The emoji button deliberately keeps reading the rhythm tokens so the glyph tracks the first text line under any rhythm a host sets. Defaults render byte-identically; hosts that wanted squashed callouts opt back in via--blok-callout-padding-block: 0.ChangedDocs — 151 verified inaccuracies root-caused and fixed across the docs site, a new guide explains how to set per-block font sizes correctly, and the docs test suite now resolves Blok's public members through the TypeScript compiler instead of a regex. Font size —
config.style.fontSizenow carries one entry per text scenario in every text-bearing block (paragraph, headings, quote, callout, code, toggle, list, checklist, table cells, captions, bookmark cards). Each entry writes that block's--blok-*-font-sizecustom property, so the same knob is reachable throughstyle.tokens,editor.tokens.set()and plain CSS. An unconfigured editor renders byte-identically to before.AddedFont size —config.style.fontSizenow carries one entry per text scenario in every text-bearing block (paragraph, headings, quote, callout, code, toggle, list, checklist, table cells, captions, bookmark cards). Each entry writes that block's--blok-*-font-sizecustom property, so the same knob is reachable throughstyle.tokens,editor.tokens.set()and plain CSS. An unconfigured editor renders byte-identically to before.AddedAPI —beginTransaction/endTransactiongroup operations spanning a pointer gesture into a single undo entry, for cases where the synchronoustransact(fn)cannot reach across async boundaries.AddedTable corner drag — The bottom-right corner now behaves the way Notion documents it: the grid tracks the pointer through live geometry instead of a unit frozen at pointerdown, a Notion-style grip replaces the old 8px dot, hovering it explains the gesture, appended columns are full width, and the whole gesture commits as one undo entry.AddedTable auto-scroll — Holding the corner at the scroll container's edge or in the viewport's top/bottom band scrolls and grows the table as it goes. Growth follows the pointer — 8px/s for every pixel held past the edge — rather than a fixed clock.AddedTable selection — Dragging a row or column grip paints the entire dragged range instead of boxing only the focused cell.AddedPlayground — A text-size slider (80%–150%) scales everystyle.fontSizescenario from its own CSS default.FixedTable — An inward corner drag stops at the first trailing row or column that holds content instead of deleting typed cells; the handle is anchored to the grid rather than the wrapper, so it no longer drifts inside the table as it grows; a caret click no longer leaves the corner handle and "+" buttons dead until the user clicks outside; clicking inside a merged cell boxes only that cell, and expanding a selection reaches merge origins, not just spans; a stalepointercancellistener no longer accumulates per completed drag.FixedStyles — Callout emoji and list markers stay aligned with their text as the font size scales, and the bookmark card's padding, line boxes, gaps and favicon scale with the card's own type.fontSize.calloutnow wins overfontSize.paragraphin the callout body.FixedTypes — The publicBlokclass exposes its full API surface.View renderer —
@bloklabs/core/viewnow reaches visual parity with the read-only editor: every core block (paragraph, header, quote, list, checklist, code, callout, toggle, divider, spacer) renders from single-sourced class modules shared with the editor,view.cssis generated from those modules, and a soft isolation root plus reproduced block scaffolding keep the output pixel-equal. A class-parity gate and a view↔read-only visual parity gate now run in CI, and the playground gains a side-by-side Blok View comparison panel.AddedView renderer —@bloklabs/core/viewnow reaches visual parity with the read-only editor: every core block (paragraph, header, quote, list, checklist, code, callout, toggle, divider, spacer) renders from single-sourced class modules shared with the editor,view.cssis generated from those modules, and a soft isolation root plus reproduced block scaffolding keep the output pixel-equal. A class-parity gate and a view↔read-only visual parity gate now run in CI, and the playground gains a side-by-side Blok View comparison panel.AddedPaste — Google Docs layout tables are now recognized: multi-row two-column tables carrying photos convert into column blocks, and single-column layout tables unwrap into their content instead of arriving as one-cell tables.AddedInline toolbar — The convert menu now opens sideways with its trigger marked selected, and the convert row is styled as the card's header.AddedCallout — A newly picked emoji jumps into the old one's place, and the emoji picker opens instantly without waiting on its dataset to download.AddedTools —data-blok-toolis now stamped on code, callout, divider and spacer roots.AddedDocs — The docs site advertises its markdown mirrors and declares Content-Signal; the published@bloklabs/core/iconssubpath is documented; the README is restructured around benefits, facts and a runnable example.FixedSecurity — Storedjavascript:XSS closed on two sinks: media download hrefs are scheme-gated, and stored embed renders are gated on the provider registry rather than a barehttps:check.FixedDrag & Drop — Drops on the seam between two blocks now resolve instead of dead-ending; the drop indicator no longer promises a nesting the drop would refuse; side-drops are gated on the columns tool actually being registered.FixedColumns — The drop animation no longer balloons the row while a block lands.FixedCode — In read-only mode the language label renders as plain text and the language dropdown toggle is hidden; the copy button keeps the same height in its "Copied!" state.FixedToolbar — Multiple editors on one page now show one set of block controls instead of stacking duplicates; the slash-search caret is sized to the input, not the block.FixedTooltip — A bubble is never parked in the viewport corner when its anchor stops rendering.FixedList — The checklist checkbox is centred on its text at any font size.FixedEmbed — Provider popups (e.g. "open in app") can escape the iframe sandbox again.FixedAudio — Cover art uploads are routed to the image pipeline instead of the audio endpoint.FixedShortcuts —BACKSLASH/SLASHrender as\and/in shortcut hints.FixedDependencies — All 40 open Dependabot alerts remediated at their root causes.- AddedMigrate — The legacy-format interpreter is now extensible from the host:
rulesentries are matched before the built-in grammar (so they can override it) while reusing container recursion, orphan re-parenting and 1:N splits; expanders may consume following siblings via{ blocks, consumed }; and passinggenerateIdmakes migration pure, so a document migrates to an equal result twice. Addsmigrate(data, options)composing the data-rule and grammar passes in the correct order,matchLegacyRule()for per-block matching, and areportcarryinglossyFields/errorsinstead of console-only warnings. Editor.js list v2metafields (start,checked) are now read.FixedMigrate —config.migrationsnow runs before format analysis, sodataModel: 'auto'inspects post-migration blocks instead of collapsing the document back to its legacy shape on save.FixedTypes —typesVersionsnow maps themigratesubpath, fixing TS2307 for consumers onmoduleResolution: "node". - AddedMigrate — Hosts can now declare per-block-type migration rules from the outside to upgrade stored blocks from an old data shape to a new one without editing the tool class. Rules are applied at load (after each tool's own
upgradeData) and also exposed as a standalonemigrateOutputDatavia@bloklabs/core/migratefor offline batch upgrades. Available on all three framework adapters. - AddedAPI — The output-data helpers are promoted to a stable entry point, alongside new document-query utilities.AddedTypes — Named config aliases and a
BlokDatainterface adapter.AddedTools — Type-safe tool authoring helpers, plus an explicit paste priority.AddedView — Root-caused view gaps #29–#33 and #35 from the hr-platform/KB audit.Addedi18n — Root-caused i18n audit gaps #36–#41.AddedMigrate / Tools / Paste — Root-caused hr-platform/KB gaps #50–#53.FixedControlled editor — Five audit findings root-caused, followed by findings #7 and #9 (and the missing test for #8).FixedMarks / Paste — Four inline-tool and sanitizer audit findings root-caused.FixedBuild (Angular) —toRenderableDatais exported from the staged adapters-contract.FixedTypes — Widened theexportscast so the string-valued./view.cssentry type-checks.Changedi18n message files are named by locale.ChangedRepaired the test/build drift that blocked the release preflight. - FixedMarkdown — Typing a list marker (
-,1.) inside a heading no longer converts the heading into a list; it stays a heading. - FixedEditor — Enter now honours the IME composition and Shift contract; added an
onErrorchannel;data-blok-toolis opt-in.FixedSanitize — Redundant inline markup is now collapsed on every path that stores HTML.FixedVideo — Unplayable sources are surfaced to the user instead of rendering a black player.FixedView — Added aclassListfacade soMarkSpecinline tools render correctly inBlokView.Fixedi18n — Localized video stats and database overflow, addedtr()interpolation, and completed locale audits across Yiddish, Vietnamese, Traditional and Simplified Chinese, Urdu, Ukrainian, Uyghur, Turkish, Thai, Telugu, Tamil, Swahili, Serbian, Albanian and Slovenian. Marks — New range-aware
api.marksinline-formatting engine, with the built-in bold/italic/underline/strikethrough tools migrated onto it. ExposesMarkSpecidentity/family/transparent semantics for authoring custom inline tools.AddedMarks — New range-awareapi.marksinline-formatting engine, with the built-in bold/italic/underline/strikethrough tools migrated onto it. ExposesMarkSpecidentity/family/transparent semantics for authoring custom inline tools.AddedView renderer — New synchronous, DOM-free view renderer published at@bloklabs/core/view(defineBlokSchema+ a central dispatcher, plus a ReactBlokView), for rendering stored block content without booting a full editor.Addedi18n — New runtimeeditor.i18n.update()API that makesconfig.i18nlive and repaints already-rendered block DOM, wired reactively through all three adapters.AddedConfig — Reactive contract forreadOnly,hideToolbarandinlineToolbar: setting them after construction now takes effect live across the React, Vue and Angular adapters (with sanitize-cache invalidation oninlineToolbar).AddedReadiness — Scoped, reactive editor readiness:whenAllReady({ within, settleOn }),readyState/subscribeReady, and auseBlokReadyhook in all three adapters.AddedDocs — The documentation site is now crawlable (prerendered metadata, sitemap, AI mirrors) and carries Google Analytics coverage across pages.AddedPlayground — Dev settings panel gains a language picker and an RTL toggle.FixedMarks — Fixed the trailing-whitespace extension eating later content when a mark ended on a boundary.FixedStyles — Surface background tokens (--blok-bg-light/-secondary/-tertiary) are now a test-enforced public contract; the gutter stays put in plain read-only soreadOnlyflips no longer shift layout.FixedTypes —MarkSpecis now imported into the main declaration entry so it resolves for consumers.FixedDocs — Russian pages are headed by their localized H1;@bloklabs/core/viewresolves in the docs build and React fixtures.FixedRelease — The Angular README is now staged into the directory npm packs.Fixedi18n — Locale audits completed across Slovak, Sinhala, Sindhi, Russian, Romanian, Portuguese, Pashto, Polish, Punjabi, Norwegian, Dutch, Nepali, Burmese, Malay, Marathi, Mongolian, Malayalam, Macedonian, Latvian, Lithuanian, Lao, Sorani, Korean and Kannada.ChangedMigrated the docs site to React Router framework mode.ChangedRenamed the default branch frommastertomain.ChangedCompleted npm metadata across the package family and hardened the view/reactive-contract law tests.API — New public
editor.tokensgetter/setter for runtime--blok-*theme tokens, with replace semantics and pre-ready buffering (liketheme/width/placeholder). Wired reactively through all three adapters: Reactstyle.tokens, Vuestyle.tokens, Angular[styleTokens].--blok-content-max-widthis now honored by database centring and toolbar control placement.AddedAPI — New publiceditor.tokensgetter/setter for runtime--blok-*theme tokens, with replace semantics and pre-ready buffering (liketheme/width/placeholder). Wired reactively through all three adapters: Reactstyle.tokens, Vuestyle.tokens, Angular[styleTokens].--blok-content-max-widthis now honored by database centring and toolbar control placement.AddedTools — Custom-tool authoring fixes:tools.update(name, { toolbox })now flips a tool's toolbox entry at runtime (permission-style insert gating no longer requires recreating the editor), including its insertion shortcut; ReactcreateReactBlockaccepts aviewComponentrendered while the editor is read-only; React toolbox icons may be React elements;commit()echo idempotency is now a documented public contract.AddedEmbed — Google Docs/Sheets/Slides/Forms/Drive embeds render at a user-adjustable pixel height with a bottom resize handle (200–2000px), persisted todata.height. Aspect-ratio media providers (YouTube, Vimeo, …) are unchanged.FixedCDN bundles —dist/blok.iife.jsanddist/blok.umd.jsshipped zero generated Tailwind utilities since the v3→v4 migration, so every unpkg/jsDelivr consumer loaded an unstyled editor. Both configs now run the Tailwind plugin (+34KB gzip each), guarded by a dist-level assertion.FixedAdapters — Five root causes from a downstream audit: a stale controlled-dataecho no longer clobbers the caret (bounded echo window instead of last-payload-only dedup);equalsOutputDatacompares block ids only when both sides carry one; React inline tools accept atitleKeyfor localization; the zero-specificity gutter default is a test-enforced public contract.FixedDependencies — Seven phantom dependencies (bare imports resolving only via hoisting, including@testing-library/jest-domused by the global unit setup) are now declared, with a law test preventing new ones.Fixedi18n — Review passes completing Armenian, Croatian, Dhivehi, Filipino, Georgian, Gujarati, Hebrew, Hungarian, Indonesian, Japanese, Kannada and Khmer, plus tool interpolation variable forwarding.ChangedUpgraded to Node 26, Angular 22 and TypeScript 6, then root-caused six defects the upgrade shipped green — most importantly the entireunit-angularvitest project loading zero tests (a fake green), and the docs test suite missing the Node 26 webstorage guard.ChangedLocal E2E suite runtime cut from ~47.5 min to ~10 min (parallel/skip-when-freshbuild:test, shared page per worker), plus broad E2E stabilization.ChangedFixed ESLint cache poisoning that replayed stale errors in CI lint runs.- AddedPaste — Google Docs tables used as fake column layouts (every row has exactly 2 or 3 cells) now paste as real column layouts instead of table blocks. Genuine tables (4+ columns, ragged rows, single column, Google Sheets, nested tables) still paste as tables.AddedAPI — Four first-class capabilities replacing host workarounds: a
style.nativeSelectionconfig opt-out for the forced::selectionrepaint, public--blok-block-padding-top/-bottom/-inlinetokens for compact read-only rendering, a staticBlok.whenAllReady()collective-readiness aggregate, andcreateReactInlineToolin the React adapter with a full inline-tooldestroy()lifecycle.FixedData integrity — Three silent data-loss defects fixed: code containing<was corrupted on render and save (if (a<b)becameif (a), empty code blocks were dropped on save, and a document whose only block was/saved as empty. Tools can now declare a field as literal text via aPLAINTEXTsanitizer rule.FixedCaret — Highlighting a non-focusable block now blurs stale input focus, so Chromium can no longer restore the current block from a stale collapsed range.Fixedi18n — Locale audit corrections across dozens of locales, including Dutch color labels and shared toggle guidance. - Addedi18n — New Taiwan Traditional Chinese locale (
zh-TW) with its own emoji dictionary, bringing the corpus to 69 locale variants. A full audit pass over every shipped locale corrected terminology and localized previously hardcoded runtime strings (media captions, database defaults, emoji category scopes, recent color labels, action search, move announcements), with hardened locale validation.AddedTheming — Newstyle.tokensconfig lets each editor instance pass--blok-*token overrides that also reach body-mounted UI (popovers, menus). The edit-mode gutter now defaults to 56px and is owned by Blok, checklists get a dedicated padding token (falling back to the list token),hideToolbarconfig now actually hides the toolbar and collapses the gutter, and--blok-placeholder-coloris a public hook.AddedInline toolbar — Restructured as a card with a convert row plus a five-column tool grid, including a new clear-format tool and redrawn toggle-heading icons.AddedColor — Text and background tunes merged into a single Color submenu; the color picker gained a Recently Used section remembering the last 5 colors; slash-menu color command titles are localized.AddedTable — Compact/comfortable text-size switch, grouped with density under a text-size submenu.AddedHeader — Heading level converts are grouped under a heading submenu in block settings.AddedImage — Overlay controls use discrete size tiers (full/medium/compact) instead of fluid scaling, keeping them legible at small widths.AddedData compatibility — Editor.js-shaped data is accepted losslessly: null-tolerantLooseOutputDatainputs, publicequalsOutputData/isEmptyOutputDatautilities, echo-safeblocks.render()(re-rendering identical data is a no-op), and a synchronousisRenderedflag.FixedPopovers — Block-settings menu placement fixes: the menu centers on the six-dots handle, stays attached to it near viewport edges, never touches the screen border, and submenus always open to the right and appear only when hovering the trigger or the submenu itself; page scroll is locked while the menu is open.FixedEditor — Toggle-heading level conversion no longer strands child blocks in a detached DOM (silent data loss); a save-time invariant gate now rejects stranded holders outright.FixedAdapters/Core — Six consumer runtime workarounds root-caused and fixed in core, types, and adapters.FixedUI — Inputs show a single focus indicator (no double border), and the popover search icon was removed.FixedAccessibility — Move and duplicate announcements are count-neutral and carry correct totals; search results announcements keep their context.ChangedCI — Shorter critical path (parallel build start, faster lint), with contract tests enforcing the workflow shape.ChangedTests — Animation-frame APIs polyfilled for jsdom environments; extreme-position e2e sweeps guard menu placement at screen edges. - Fixedi18n — Capitalized
toolNameskeys (e.g.toolNames.TestTool) resolve again in the toolbox: the lookup now tries the raw tool name first, then the capitalized key, restoring the published contract that 1.2.3's raw-name lookup silently dropped. An empty toolbox title no longer short-circuits the fallback chain and renders a blank slash-menu item — it is treated as absent and falls back to the capitalized tool name.ChangedCI — The docs site now deploys only on package releases, and the deploy is gated by a verifier that checks the published packages (tied to the release version family) before the site goes live. - AddedTheming — More host customization hooks: heading tokens (keyed off
data-blok-heading-level) and embed tokens, a--blok-list-gaptoken for list spacing, and palette tokens declared at zero specificity via:where()so host overrides always win.--blok-content-max-widthis now authoritative when the editor is inwidth: 'full'mode.AddedRead-only — The editor wrapper is stamped withdata-blok-readonlyas a public styling hook, and the block-controls gutter auto-collapses in read-only mode so content uses the full column.AddedAdapters — The three React-integration workarounds were removed by fixing their root causes in core.Fixedi18n — Custom tool titles now localize viatoolNames.<toolName>dictionary keys.FixedImage — GIF→video auto-conversion is skipped when no video tool is registered, instead of failing the upload.ChangedBuild —dist/output is now minified and JSON data is emitted asJSON.parsestrings, cutting published bundle weight.ChangedDocs — Documented the theming hooks,data-blok-readonlyattribute,contentAlign,toolbox: falsegating, the GIF guard, thereadOnlyobject form, andtoolNameskeys. - AddedTheming — New public
--blok-*custom properties let host apps customize editor layout without reaching into internals:--blok-content-max-width(content column cap),--blok-editor-gutter-start/--blok-editor-gutter-end(space reserved for the floating block controls, RTL-correct),--blok-list-padding-start(list indent), and--blok-search-input-placeholder(popover search placeholder color). Defaults preserve current behavior; documented in the docs-site Styles API section.AddedReact — First-class block authoring:createReactBlockrenders block tools authored as React components through a shared portal host inside the host app's React tree, so app-level context (providers, themes, stores) reaches block components directly — no morecreateRootper block or context bridges. Every function in a tool's config (including nested ones likeuploader.uploadByFile) is now re-bound to the latest render's closure, so inline closures work without freezing identities or recreating the editor.FixedFloating UI — A hardening sweep across every floating surface: popovers anchored inside nested scroll containers no longer drift or detach on scroll (snapshot anchors, virtual selection anchors, and fixed-position menus all track correctly); tooltips dismiss on nested scroll; the emoji picker and link hover card follow moving anchors; root boundary calculation is normalized for scrolled and 100vh host bodies. An architecture test now enforces that all floating UI goes through the central positioning module.FixedRenderer — Stored block data is now sanitized on render with the same per-tool sanitize config the Saver applies, closing stored-HTML injection for legacy data that never round-tripped through save (e.g. a raw<iframe width>baked into paragraph text overflowing its column). Fixed-width iframes/embeds are additionally capped atmax-width: 100%.FixedLink — The hover card now requires actual pointer motion before opening, so it no longer opens when a link merely renders or scrolls under a stationary cursor.ChangedRelease — Preflight (eslint ∥ tsc ∥ vitest) and build pipelines were parallelized (~2× faster wall clock), with per-step timeouts so a hung build can no longer stall a release. GitHub Packages mirror tarballs now rewrite@bloklabs/corespecifiers in every shipped file (previously react/vuetypes/index.d.tsstill referenced the npm scope, breaking consumertscon GHP-only installs). - AddedImage — Images now display at the full width of the article by default. Previously an image without an explicit size preset rendered at the medium (520px) preset; the default is now the
fullpreset. Images with an explicitly savedsizeare unaffected.FixedPopover — The search input's focus ring was clipped along its bottom edge by the context label's opaque background painting over it; the search wrapper now renders in the positioned paint layer so the full ring is visible. The gap between the search field and the context label was also widened slightly. Media — Playback speed and loop preferences now persist across audio and video blocks. They are stored in
localStorageunder shared per-media-type keys (blok:audio:rate/loop,blok:video:rate/loop), joining the existing shared volume and per-source position keys, and are restored when a player attaches — without dirtying block data.AddedMedia — Playback speed and loop preferences now persist across audio and video blocks. They are stored inlocalStorageunder shared per-media-type keys (blok:audio:rate/loop,blok:video:rate/loop), joining the existing shared volume and per-source position keys, and are restored when a player attaches — without dirtying block data.FixedQuote — Saving a quote block no longer stripshref/target/relfrom links (leaving dead anchors in stored content) or unwraps bold/italic marks. Quote now uses the same inline-text sanitize rules as paragraph and header, so links, formatting, and color styles survive save and conversion.FixedAudio — OneDrive share links from SPO-migrated accounts (the new/u/c/<cid>form) can't be resolved anonymously and produced a silently dead player; they now surface a clear "needs an uploader backend" error instead.FixedToolbar — The plus button and drag handle no longer stay stuck at the wrong offset after the slash-command popover opens or closes; the toolbar repositions on toolbox open/close instead of relying on a resize side effect.FixedToolbox — Opening the toolbox silenced the current block's mutation watching and never re-armed it, leaving the block permanently deaf to later content changes until re-render. Watching is now re-armed on both close paths, and the toolbar follows any inner-geometry change that doesn't resize the block holder.ChangedCI — The build artifact now ships the extractedpackages/*/distadapter bundles alongsidedist/, fixing downstream unit and E2E jobs;yarn.lockwas synced to the^1.1.1core peer range.ChangedDocs — README and the docs site updated for the@bloklabs/*package family; the rename notice was subsequently dropped from the README.- Breaking`@bloklabs/core` has zero peer dependencies. The react/react-dom/vue optional peers are gone — installs no longer warn about frameworks you don't use, and the GitHub Packages
peerDependenciesMeta-stripping bug (which forced Yarn Berry consumers to add apackageExtensionsworkaround) no longer applies. Delete that.yarnrc.ymlentry after upgrading.BreakingAdapters declare hard, accurate peers: each requires its framework plus@bloklabs/coreat the matching version.BreakingGitHub Packages mirrors:@dodopizza/blokremains the core mirror; adapters mirror as@dodopizza/blok-react,@dodopizza/blok-vue,@dodopizza/blok-angular; the CLI stays@dodopizza/blok-cli.BreakingMigration: the bundled codemod (npx -p @bloklabs/core migrate-from-editorjs) now also rewrites legacy@jackuait/*import specifiers andpackage.jsondependency keys to the new names. Audio — Share links from seven more services — Dropbox, OneDrive, GitHub, GitLab, Hugging Face, Google Cloud Storage, and Internet Archive — are recognized and rewritten to their direct-content form, so they play in the browser with no backend. Google Drive share links (hotlink-blocked server-side) are normalized and routed through the consumer's
uploadByUrlbackend, with a Drive-specific error message when none is configured. The error state gets a styled callout with a retry button.AddedAudio — Share links from seven more services — Dropbox, OneDrive, GitHub, GitLab, Hugging Face, Google Cloud Storage, and Internet Archive — are recognized and rewritten to their direct-content form, so they play in the browser with no backend. Google Drive share links (hotlink-blocked server-side) are normalized and routed through the consumer'suploadByUrlbackend, with a Drive-specific error message when none is configured. The error state gets a styled callout with a retry button.AddedRead-only —readOnlynow accepts an object form:{ hideControls: true }enables read-only mode and suppresses the toolbar, block settings, and inline toolbar. Exposed viaisControlsHidden, normalized across the React, Vue, and Angular adapters, andReadOnlyModeConfigis exported from the types root.AddedImage —compress: { format: 'avif' }now produces real AVIF via WebCodecs when the canvas encoder cannot, and a newfallbackFormatoption (e.g.'webp') covers browsers with no AV1 encoder instead of silently uploading the original bytes.FixedAudio — Audio inserted by URL is now enriched like uploads: waveform, title/artist metadata, and cover art, failing soft to a plain scrubber when the host blocks the CORS fetch.FixedTable — Undo inside a table no longer duplicates cell blocks into invisible ghosts that reappear under the table after save; blocks placed at the top of a cell no longer drift to the bottom or become orphans on save. The Saver gains save-boundary guards for cell membership and cell block order (throw in dev/test, repair the emitted output in production).FixedTooltip — The tooltip bubble is click-transparent, so it never swallows clicks on controls it covers (e.g. color-picker swatches under a bottom-row tooltip).FixedPopover — Nested popovers no longer collapse to their padding in WebKit; the marker color picker rendered as a 12px sliver in Safari.FixedStyles — Body-mounted UI (link hover card, notifier toasts, drag previews) now carries the scope attribute, so its styles survive in consumer apps; a new architecture test enforces the invariant for everydocument.bodymount.FixedAngular — The ng-packagr build stages the readonly-config module, fixing a CI-only TS2307; an architecture test now walks the adapter's import graph to catch unstaged modules.ChangedPlayground — Gallery empty states run the real tool per state (with per-state tool config) instead of static mockups, including a live Google Drive error demo.ChangedTests — Adversarial table undo probes (merge undo, insert undo/redo), tooltip click-transparency lifecycle guards, and an exhaustive swatch hit-test sweep.Header — Toggle headings are now offered at all six levels, staying in sync 1:1 with regular headings.
AddedHeader — Toggle headings are now offered at all six levels, staying in sync 1:1 with regular headings.FixedMigration — The legacy Editor.js grammar is now authored as ESM so consumer dev servers can load blok's source graph without a build step.FixedColumns — Blocks inserted via the plus button no longer save at the bottom of the column; saved order now matches the on-screen (WYSIWYG) order.FixedStyles — Injected utilities are scoped so a host application's CSS reset can't flatten the editor.ChangedMigration — Single-sourceLEGACY_GRAMMARshared by both the runtime and the codemod; the codemod's source rewrite is now AST-guided (via the consumer's@babel/parser) to avoid mangling comments, strings, and unrelated identifiers.ChangedCI — Root-caused CI failures: scoped-utility drift on body-mounted UI, lint, and test flake fixes (webkit paste timing, six-level toggle-heading counts).Spacer — New adjustable-height spacer block. Drag either edge to resize (dual-edge grips), with a text-block-height floor, snap-to-sibling and snap-to-column alignment guidelines, an on-edge capsule resize pill, and accent hover cues. Fully invisible in read-only/published renders.
AddedSpacer — New adjustable-height spacer block. Drag either edge to resize (dual-edge grips), with a text-block-height floor, snap-to-sibling and snap-to-column alignment guidelines, an on-edge capsule resize pill, and accent hover cues. Fully invisible in read-only/published renders.AddedImage — Uploads are now automatically compressed and re-encoded (compress, on by default), with opt-in smaller output formats. In-cell images gain a resize floor and fluid chrome via container queries.AddedToolbar —Cmd/Ctrl+Slashopens the block menu in read-only mode.FixedTable — Large batch of Notion-parity fixes: paste-header handling, the cell color picker, the cell menu, arrow-key navigation between cells, and column width reset. The cell box now follows the caret (instead of the pointer) and the resize handle no longer forces overflow. Focus stays inside a cell when its content is deleted, the caret stays put after clearing a multi-cell selection, multi-line cell selections merge into one rounded shape, drag-selecting several lines within a single cell works, and list items scale to the cell font instead of outsizing sibling paragraphs.FixedColumns — Stranded resize separators left behind by removing a column no longer render as a phantom column.FixedCore — Never Tab-indent a block into a tool-owned container.FixedToolbox — Keep plus-button blocks on a table out of its cells, and anchor fuzzy search at word boundaries.FixedSelection — Stop hijacking intra-line text drags inside table cells.FixedEmbed — Validate stored URLs at render time (stored-XSS guard).FixedList — Keep bullet markers non-editable so Enter never ghosts an item.FixedToolbar — Read-only drag-handle refinements: announce it as a menu button, show a pointer cursor, and drop the⌘/and "Drag to move" hint lines; no read-only handle appears beside blocks that paint nothing.FixedTunes — Hide the copy-link shortcut hint in read-only mode.FixedStyles — RightcontentAlignno longer collapses into centering, and preflight resets are scoped to@layer baseso Blok's own utilities win.FixedReact — Guard against staledistexports and aStrictModereadiness race.- AddedHeader — Opt-in
anchorIdsconfig derives stable heading anchor ids from heading text.FixedLink — Pad the edit-menu input wrapper so the focus ring isn't clipped, and enlarge the remove-link (trash) icon.ChangedCI — Fetch mirror tags before pushing to avoid creating over an existing tag. - AddedLink — New
link.transformconfig, a superset oftransformHref: consumers can set per-anchorhref/target/relplus extra attributes (class/title/data-*) without post-processing the rendered DOM. Applies consistently across every anchor path (render, paste, and hand-created links); omitted fields fall back to existing defaults (including the same-page_selfrule) and extra attributes never clobber the managedhref/target/rel.FixedColumns — Keep the inter-column gutter in read-only/published renders. The gap was previously produced entirely by the (no-op in read-only) resize handles, so read-only columns rendered flush; the gutter is now decoupled from the resizers.FixedLink — Center the hover card under the pointer (shifting near viewport edges) with a fixed gap to the link, and stop the block toolbar leaking through the card when hovering top-layer chrome.FixedNotifier — Fix top-layer placement so the toast stays in its corner (no UA Canvas box or top-left jump), remove the in-pill dismiss cross (auto-dismiss/Escape still close it), and tighten the pill's vertical padding. - FixedTypes — Fixed a publishing defect (introduced in 0.24.0) where importing
@dodopizza/blok/react— or@dodopizza/blok/markdown— made a consumer's TypeScript compiler follow the published declarations into rawsrc/implementation, producing spurious errors about unresolvedmicromark-util-types/@types/mdast(TS2307) and implicitany(TS7006). The publictypes/*.d.tssurface is now self-contained and no longer re-exports fromsrc/.ChangedTypes — Mechanically enforce that no publishedtypes/*.d.tsre-exports or imports fromsrc/, and generate the self-contained icon declarations from source (scripts/generate-icons-dts.mjs). Vue — New first-class
@jackuait/blok/vueadapter:BlokEditorcomponent,useBlok, andprovideBlok, pluscreateVueBlock/useBlocksfor authoring custom blocks and driving the block tree from Vue. Custom Vue blocks support read-only in-place toggling.AddedVue — New first-class@jackuait/blok/vueadapter:BlokEditorcomponent,useBlok, andprovideBlok, pluscreateVueBlock/useBlocksfor authoring custom blocks and driving the block tree from Vue. Custom Vue blocks support read-only in-place toggling.AddedAngular — New first-class@jackuait/blok/angularadapter shipped as an Angular Package Format build (ng-packagr): the editor component/directive, a block portal registry, theBLOK_BLOCK_CONTEXTrender-context token,createAngularBlockauthoring, and the reactiveinjectBlocksblock-tree API.AddedReact — NewuseBlockshook exported from@jackuait/blok/react: a reactive block-tree API with reads,insert(position + append-to-parent, explicit id, tunes,replace),move(before/after/toIndex),nest/unnest/remove/transact,insertMany, atomicinsertTreefor nested subtrees, and additiveinsertMarkdown. Block-creation semantics are hardened across hierarchy edges with compile-time drift guards against the core API.AddedAdapters — Closed React/Vue/Angular parity gaps across component paths and escape hatches; shared one blocks-api core so Vue'suseBlocksreaches React parity, and extracted sharedfillDefaults/PropSchemahelpers. Custom-block authoring is now first-class on the public API surface.AddedAccessibility — Five-wave overhaul adapting shadcn/ui interaction patterns to Blok's UI primitives: dismissal-layer/popover teardown/scroll-lock/announcer foundations, an anchored-positioning engine and shared modalDialog, keyboard reachability for toolbars/menus/radios/rename, and assistive-tech feedback parity across selection, drag, menus, and arrival.AddedLink — Clickable links with a hover card in both edit and read-only modes (with enter/leave animation), an edit mode featuring a title field and remove-link action, refined hover-card chrome, blocking of unsafe-scheme navigation, and a consistent same-page/anchor-link rule that opens such links in the same window across all link-creation paths.AddedBlocks — StructuralparentIdnesting: any block can now be nested inside any list (flat per-block indent), with list keyboard nesting and drag/serialization migrated onto the structural block tree.AddedKeyboard —Cmd+Left/Cmd+Rightnavigate between blocks at block edges;Backspaceat the start of a nested block removes one indent level; mixed-listTabindents both kinds; and numerous Notion-parityTab/arrow/Delete/Backspace fixes.AddedPaste — Paste-without-formatting (Cmd/Ctrl+Shift+V); recovery of buildin/Notion toggles and soft breaks from lossy GFM HTML fallback.AddedInline — Link-markdown auto-format and a link-paste menu; shortcut-triggered Link/Equation/Marker now open a standalone menu positioned right under the selection.AddedPopover — Custom cross-platform scrollbar that hides the classic OS bar while keeping a stable gutter; reel-like edge distortion replacing the scroll haze.AddedConvert — SharedbuildConvertMenuEntrieswithtitleKeyresolution, used by both block settings and the inline "Turn into" menu (which now lists the full text family), guarded by parity E2E.AddedImage — Configurable auto-retry on image load failure (default 5).FixedCRDT/Yjs — Undo/redo no longer yanks the caret to the top of the document; the caret restores to the correct position,split()inherits full tool data (correct heading undo caret), redo moves the caret to the new block on an Enter split, and five further Yjs sync gaps in tools and modules were closed.FixedList — Closed dozens of Notion-parity divergences across convert, keyboard, drag, selection, and copy/paste; source ordered lists renumber when an item is dragged away; bullet glyphs refresh on depth change.FixedText/Header — Fixed 30+ Notion-parity bugs by root cause (slash+space, duplicate pulse, indent toolbar, caret offset preservation on turn-into, and more).FixedTable — Preserve merged cells and lists when pasting external tables, and keep list markup when copying cells out to external apps.FixedPaste — Preserve lists and quote-ness in pasted blockquotes; pasted links use the default link color; the link menu shows on non-empty blocks without erasing content; closed remaining sanitizer/merge data-loss gaps found by an audit.FixedBlocks — Re-parent a merged block's children onto the survivor instead of orphaning them; release toggle children as siblings when turning a toggle into text; fire the toolmoved()hook onsetBlockParent; never write split text into a mutation-free decoration.FixedColumns — Match Notion's inter-column gutter spacing; restore DOM order when undoing column creation.FixedDrag — List-item drop line tucks under the text with a marker lead-in; depth changes apply on same-slot drops; non-list blocks stop previewing nested drops they can't reach.FixedSelection — Fake highlight matches the native selection color and stays visible while a menu input is focused;Cmd+Acontainer-scoped staging.FixedMarker — Reset<mark>background so colored text never shows the browser's yellow highlight.FixedToggle — Arrow container stays a constant 28px square and pins to the first line for multi-line toggle/heading.FixedStyles — Reserve a scrollbar gutter on all scrollable components and keep it in nested inline-toolbar menus; auto-hide scrollbars system-style while keeping the gutter.ChangedPaste — Mechanically enforce the paste attribute law and the paste stamp law via architecture tests.ChangedTests — Repaired all CI-matrix E2E shards; added regression coverage across list keyboard shortcuts, columns undo order, popover scrollbar spec, and adapter integration/e2e.ChangedLint — Resolved all 69 root ESLint problems at the root cause.- AddedCore — The
linkconfig ({ target, rel, transformHref }) now also applies on the render and paste paths, not just the interactive link tool. Anchors coming from stored block HTML (rendered viablocks.render()) and<a>arriving through the clipboard now get the configuredtarget/relforced andtransformHrefapplied to their href — so consumers no longer need to post-process the rendered or pasted DOM. Because the render path rewrites live anchors whose href round-trips into saved data,transformHrefmust be idempotent.AddedCore — NewonBeforeRender(blocks) => blocksconfig transforms the blocks array before every render (the initial render and eachblocks.render()), letting you run app-specific data migrations inside Blok instead of pre-processing the data yourself. It runs on the raw saved blocks before format analysis, so it can also inject blocks into an empty document.AddedCore — NewonAfterRender(api)config fires after a render completes and the blocks are in the DOM (initial render and everyblocks.render()), for post-render side effects such as scroll restoration — distinct from the once-onlyonReady.AddedCore — A stabledata-blok-renderedattribute (exposed asDATA_ATTR.rendered) is now set on the editor wrapper when a render batch finishes inserting blocks, and removed while a re-render is in flight — a DOM-level render-readiness gate that complements the existingblocks:renderedevent.AddedBlock Tunes — A custom tune'srender(context)now receives an optionalBlockTuneRenderContextwhosegetPopoverElement()returns the host tune popover element ([data-blok-popover]), so tunes can anchor sub-menus or portals inside Blok's popover without reaching into the DOM viaclosest(...). The element resolves once the popover mounts (it isnullsynchronously duringrender()).AddedReact —<BlokEditor>/useBloknow acceptonBeforeRenderandonAfterRender. Both are attached only when provided and are ref-stable, so updating the callbacks never recreates the editor. - AddedCore — New
onSave(data, api)config delivers the full serializedOutputData(debounced via the existing change-batch window) whenever content changes — the "output half" of a controlled editor. Pair it with thedataconfig to mirror editor state into your own store with a single callback instead of callingsaver.save()by hand. Only user-driven changes trigger it; programmaticrender()does not (the change observer is disabled during render), so a controlled round-trip won't recurse. Available to all consumers, not just React.AddedReact —<BlokEditor>/useBloknow acceptonSave, making<BlokEditor data={data} onSave={setData} />a true controlled component to pair with the reactivedataprop from 0.23.3. The callback is ref-stable (never recreates the editor) and attached only when provided. Echoing the payload straight back viaonSave={setData}is caret-stable: the adapter records the editor's own emitted output as the content baseline, so the round-trip deep-equal–dedupes to a no-op (no re-render, no caret reset) while genuine externaldatachanges still render in place. - AddedReact — The
<BlokEditor>/useBlokdataprop is now reactive: passing new content re-renders the editor in place viaeditor.render()instead of being read only once at creation. Identical content is de-duplicated (deep-equality) so the caret is never clobbered, rapid changes are serialized, and a freshly-seeded editor is not double-rendered.AddedCore — New typed render events:blocks:rendered(payload{ count }) fires when a batch finishes rendering, andblock:rendered(payload{ blockId }) fires per block. The runtime event-name constantsBlocksRendered/BlockRenderedare exported, so consumers can react to rendering instead of polling the DOM. The publicEventsAPI is now typed against an event/payload map while still accepting arbitrary string events.AddedCore — Newlinkconfig ({ target, rel, transformHref }) lets consumers configure the anchors the link tool creates instead of post-processing the DOM. Defaults (_blank/nofollow) are preserved, configured values now survive save, and URL validation/allowlisting is unchanged.AddedPaste — NewonBeforePaste(html) => string | nullconfig hook transforms (or drops) raw clipboard HTML before Blok preprocessing; returningnullfalls back to plain-text paste.AddedAPI — Neweditor.tools.update(name, config)shallow-merges a tool's config in place — e.g. swap an uploader — without recreating the editor.ChangedTests — Exported stableTEST_IDconstants (plus button, settings toggler, block wrapper) wired into the editor chrome viadata-blok-testid, so consumers no longer query internal selectors. - ChangedDocs — Documented two React-adapter caveats.
<BlokEditor>must not be wrapped instyled()or any HOC that reserves thethemeprop: styled-components claimsthemefor its ownThemeProvider, so it never reaches the editor and theme sync silently breaks — render it directly and style the container viaclassName. Anddepsvalues must be referentially stable (each value compared individually, not the array wrapper), otherwise the editor is recreated on every render. Both caveats now appear in the README, the docs site, and theBlokEditor/useBlokJSDoc and published type declarations. - AddedCore — A new
editor.placeholderruntime API (get/set) lets consumers read and change the empty-paragraph placeholder on a live editor, mirroring the existingwidthAPI. Updates apply to existing blocks and to blocks created afterwards.AddedReact —<BlokEditor>now accepts a reactiveplaceholderprop (backed by the new core API) that updates the editor in place without recreating it, and forwards all standard<div>attributes —id,aria-*,data-*, and the like — to the editor container. React — A blessed
<BlokEditor>component is now the recommended way to embed Blok in React. It forwards a typed ref to the live editor instance, takes an uncontrolleddataseed, and reactively syncsreadOnly,autofocus,theme, andwidthprops without recreating the editor. ItsonReadycallback fires after the ref commits, so consumers can safely callref.currentfrom inside it. The lower-leveluseBlokhook plusBlokContentremain available as an escape hatch.AddedReact — A blessed<BlokEditor>component is now the recommended way to embed Blok in React. It forwards a typed ref to the live editor instance, takes an uncontrolleddataseed, and reactively syncsreadOnly,autofocus,theme, andwidthprops without recreating the editor. ItsonReadycallback fires after the ref commits, so consumers can safely callref.currentfrom inside it. The lower-leveluseBlokhook plusBlokContentremain available as an escape hatch.ChangedReact —useBloknow reactively syncsthemeandwidthprop changes to the editor instance, mirroring the existingreadOnly/autofocuspattern.ChangedDocs — The demo wrapper now dogfoodsBlokEditor, and the README React section documents the recommendedBlokEditorpath, the uncontrolleddatacontract, reactive props, and theuseBlok+BlokContentescape hatch.ChangedTests — Added e2e coverage for save-via-ref and live prop toggles, a published-vs-source type-drift guard, anddata-blok-testid-based locators.Paste — Content copied from buildin.ai now imports as native Blok blocks at full fidelity. buildin's clipboard carries a lossless
text/next-space-blocksJSON payload beside a lossy Markdown/HTML twin; Blok previously fell back to the twin, where tables collapsed to literal|pipes|, media degraded to links, and callouts, toggles, columns, to-dos, and code language flattened away. A new handler decodes the JSON directly, reconstructing the same native blocks as a Blok→Blok paste — paragraphs, to-dos, H1–H4, tables (grid + parented cells), bulleted/numbered lists, toggles, dividers, quotes, callouts (emoji + colour), code (with language), equations, toggle-headings, column lists, and image/video/audio/file/embed-bookmark media. (Inline marks — bold/italic/link/colour — are a documented follow-up.)AddedPaste — Content copied from buildin.ai now imports as native Blok blocks at full fidelity. buildin's clipboard carries a losslesstext/next-space-blocksJSON payload beside a lossy Markdown/HTML twin; Blok previously fell back to the twin, where tables collapsed to literal|pipes|, media degraded to links, and callouts, toggles, columns, to-dos, and code language flattened away. A new handler decodes the JSON directly, reconstructing the same native blocks as a Blok→Blok paste — paragraphs, to-dos, H1–H4, tables (grid + parented cells), bulleted/numbered lists, toggles, dividers, quotes, callouts (emoji + colour), code (with language), equations, toggle-headings, column lists, and image/video/audio/file/embed-bookmark media. (Inline marks — bold/italic/link/colour — are a documented follow-up.)FixedPaste — Callout body and colour now survive import from both Notion and buildin.ai. Blok's callout stores its body in child blocks, so the inline title/body text the parsers emitted asdata.textwas silently discarded — the callout is now emitted (colours only) plus a child paragraph carrying its text. Out-of-palette callout colours (e.g. buildin's Britishgrey, or any name outside Blok's 9-colour preset) previously produced an undefined CSS variable that dropped both the background and the border; colours now normalize through Blok's preset palette (grey→gray; unknown names clamp to null).- AddedMedia — Image, video, audio, and file blocks can now be restricted to upload-only or link-only via configuration, so consumers can offer a single source instead of always exposing both.ChangedMedia — Deduped
MediaSourceinto a single shared type across the media tools.ChangedDocs — Documented the audio block tool, and added upload-only and link-only empty states to the playground gallery. Tests — Added regression coverage for HTML-over-Markdown routing, document-order preservation, internal-reference rescue, pasted audio titles, and date-glyph handling.
FixedPaste — Rich clipboards (Notion and similar) ship both a faithful HTML payload and a lossy Markdown twin. Routing now prefers the HTML handler, so pasted images, links, and structure the Markdown twin drops are preserved.FixedPaste — Notion content keeps its document order: nested children no longer render above their parents (only table cells stay children-first, since the table tool resolves cell ids on insert). Internal references that previously vanished — sub-pages, linked databases / collection views, and inline page mentions — now paste as Notion bookmarks/links instead of being dropped or leaking the raw "‣" glyph, and uploaded media whose binary isn't on the clipboard becomes a Notion-link bookmark carrying the filename rather than a bare filename paragraph.FixedPaste — Pasted external Notion audio now shows its title (the player readsdata.title, which was left blank), and a malformed inline date annotation no longer leaks the raw "‣" placeholder glyph.ChangedTests — Added regression coverage for HTML-over-Markdown routing, document-order preservation, internal-reference rescue, pasted audio titles, and date-glyph handling.Paste — Content copied from Notion now migrates as native blocks with full state preserved. When Notion's lossless clipboard JSON is present it is used directly (the high-fidelity path), with an HTML fallback for sources that only expose markup. Inline equations and page mentions are mapped to their Blok equivalents.
AddedPaste — Content copied from Notion now migrates as native blocks with full state preserved. When Notion's lossless clipboard JSON is present it is used directly (the high-fidelity path), with an HTML fallback for sources that only expose markup. Inline equations and page mentions are mapped to their Blok equivalents.AddedAudio — Custom cover art. A cover picker (file upload or image URL) opens from an editable overlay button on the player; covers can be set, replaced, or removed (via a "Remove cover" block setting), with an animated picker open, a sliding Upload/Link tab transition, a themed surface that matches the player, and i18n across all locales. Audio blocks with no cover now show an inertial spinning-vinyl turntable placeholder instead of an empty panel.FixedAudio — Repaired the transport controls and the video-style playback-speed menu, which now stays open after picking a preset. The volume bar fill is fixed so a muted track reads differently from a full one, and the playing waveform pulses smoothly without gouging its dots. The caption toggle stays on the compositor, and the cover picker no longer jumps height on tab swap, gets an explicit width so the URL field isn't cramped, and revokes leaked cover blobs on a destroy race.FixedTable — Pinned the top toolbar anchor flush to the table edge.ChangedTests — Added unit and e2e coverage for custom cover set/remove and for real Notion page-mention arity, and cleared the lint/type violations the cover-art work introduced.- BreakingTypes —
OutputBlockData'sdatafield is now typedRecord<string, unknown>instead ofany(matchingBlockToolDataandSavedData). Reading a property off a saved block'sdata— e.g. onsave()output — now yieldsunknownrather thanany, so code that indexes intoblock.datamay need a cast or type guard. This is a type-only change with no runtime effect.FixedTypes — Published.d.tsdeclarations are now self-contained and no longer re-export rawsrc/*.ts. A bareimport { Blok } from '@jackuait/blok'previously dragged editor source into the consumer's TypeScript program (throughtooltipandpopover→flipper), surfacing internal type errors under strict consumer flags such asnoUncheckedIndexedAccess. Thetooltipandpopoverdeclarations now inline their public types, so consuming the package no longer type-checks Blok's internals. (The opt-in/markdownsubpath is unchanged.)FixedTypes — The published declarations are now internally consistent underskipLibCheck: false. Fixed an incorrectBlockToolDataimport path in thedatabase/header/listtool declarations (which also produced spurious "incorrectly extendsBlockTool" errors), added a missingInlineToolConstructable/InlineToolConstructorOptionsimport in the type entry, and removed phantomDictionary/DictValuere-exports.ChangedDependencies — MovednanoidtodevDependencies; it is bundled into every dist artifact and was never a runtime external. - AddedTypes —
isReadynow resolves with the fully-initializedBlokinstance (wasPromise<void>), soconst editor = await blok.isReadyyields a ready, fully-typed editor without a cast. New exportedPendingBloktype describes the surface available synchronously afternew Blok()and beforeisReadyresolves (isReady,destroy,theme,width) — type a reference held during that window asPendingBlokinstead of widening toPartial<Blok>, then awaitisReadyto narrow it to the full API.new Blok()still returns the fullBlok, so existing usage is unaffected. Width — New public
widthAPI on the editor instance:instance.width.get(),set('full' | 'narrow'), andtoggle()switch the content layout between'narrow'(the default, constrained to--max-width-content) and'full'(the contentmax-widthis removed so it fills its container). It mirrors thethemeAPI, including buffering aset()call made before the editor is ready and replaying it once the editor is initialized.AddedWidth — New publicwidthAPI on the editor instance:instance.width.get(),set('full' | 'narrow'), andtoggle()switch the content layout between'narrow'(the default, constrained to--max-width-content) and'full'(the contentmax-widthis removed so it fills its container). It mirrors thethemeAPI, including buffering aset()call made before the editor is ready and replaying it once the editor is initialized.FixedTypes — Declare thehistoryAPI on the exportedBlokinstance type.history(clear(),undo()/redo(),canUndo()/canRedo()) was already available at runtime; consumers no longer need to cast the instance to reach it.Audio — New native Audio block tool. Now-playing card with cover art (lazy
music-metadataextraction), a waveform canvas with click/drag seek, transport controls (play/pause, volume, playback speed, loop, keyboard shortcuts, persisted preferences), file and URL upload, paste handling routed away from the File block, read-only support, and i18n across all locales. The player card is a full-bleed redesign — a tall cover panel (music-note placeholder when there is no art), a hero waveform scrubber with rounded bars, a slim transport bar, and motion polish.AddedAudio — New native Audio block tool. Now-playing card with cover art (lazymusic-metadataextraction), a waveform canvas with click/drag seek, transport controls (play/pause, volume, playback speed, loop, keyboard shortcuts, persisted preferences), file and URL upload, paste handling routed away from the File block, read-only support, and i18n across all locales. The player card is a full-bleed redesign — a tall cover panel (music-note placeholder when there is no art), a hero waveform scrubber with rounded bars, a slim transport bar, and motion polish.AddedMedia — Image, video, and audio blocks now accept any file of their media family (image/*,video/*,audio/*) by default. Restrict the accepted types through the existingtypesconfig, which now accepts both exact MIME types (image/png) and family wildcards (image/*).FixedTypes — ExportFile,Audio, andVideo(and their data/config/uploader types) and add thefile/audio/videokeys todefaultBlockToolsfrom the@jackuait/blok/toolstypes entry. The runtime already exported these tools; consumers no longer need a local ambient type shim to import them.ChangedPlayground — Audio block states in the block-states gallery (real ID3-tagged track and a "No cover art" state) plus an e2e harness for insert/upload/play/seek.Video — New native Video block with a custom Airbnb-style player, brought to YouTube parity: full keyboard control (
j/l/k,0–9,Home/End, frame-step, volume, speed), a scrubber with buffered range, hover frame-preview tooltip and mini progress bar, an in-player gear menu (Notion-style playback speed with glide, loop, ambient-glow intensity), and view modes — picture-in-picture, a FLIP-morphed theater/cinema mode, and a fade-in ambient glow. Player polish includes click-to-toggle play/pause, a centre play/pause burst, press-and-hold for 2× playback, arrow-key ±5s seek with side indicators, idle auto-hide, buffer spinner, time-remaining toggle, right-click menu, stats overlay and persisted preferences.AddedVideo — New native Video block with a custom Airbnb-style player, brought to YouTube parity: full keyboard control (j/l/k,0–9,Home/End, frame-step, volume, speed), a scrubber with buffered range, hover frame-preview tooltip and mini progress bar, an in-player gear menu (Notion-style playback speed with glide, loop, ambient-glow intensity), and view modes — picture-in-picture, a FLIP-morphed theater/cinema mode, and a fade-in ambient glow. Player polish includes click-to-toggle play/pause, a centre play/pause burst, press-and-hold for 2× playback, arrow-key ±5s seek with side indicators, idle auto-hide, buffer spinner, time-remaining toggle, right-click menu, stats overlay and persisted preferences.AddedVideo — Custom fullscreen surface with a top caption bar, a "Hide controls" tune for a control-free player, and GIF-style autoplay/loop tunes.AddedImage — Auto-convert dropped, pasted and remote-URL GIFs into a looping Video block via WebCodecs + webm-muxer, gated by theconvertGifToVideoconfig (default on); the original GIF is kept on CORS failure, with a "Converting…" label shown during conversion.AddedMedia — 30MB default upload limit with per-typemaxSizeconfiguration and human-readable too-large errors.FixedPaste — URL paste always prompts now; the previous auto-embed behaviour has been removed. Breaking: consumers relying on silent auto-embed must opt in through the paste menu.FixedVideo — Reserve the aspect ratio before metadata loads to prevent squeeze-on-load, centre and letterbox the fullscreen player, strip editor chrome in fullscreen, and hide the bottom mini progress bar while fullscreen.FixedVideo — Exit theater mode reliably on Escape via a capture-phase listener with a smooth deferred dismiss, and drive the scrubber fill withrequestAnimationFramefor smooth playback tracking.ChangedBuild — Movewebm-muxerto devDependencies so it is bundled rather than treated as an external runtime dependency.ChangedREADME — Replace the logo with the optimized noodle mascot.ChangedPlayground — Use real self-hosted videos in the block-states gallery.File — New File block tool. Tabbed empty state with upload (validation, progress bar, cancel), URL and drag-and-drop; per-type icon and tint; editable filename; consumer upload endpoints and download card. Rich preview modal dispatched by kind: PDF (top-layer modal with open-in-new-tab), Office (docx/xlsx/pptx via lazy renderers, xlsx parsed through JSZip), and text/code/markdown — including advanced markdown (math, footnotes, references, alerts, anchors, safe block-level raw HTML) with an animated Rendered ⇄ Raw toggle. Read-only support, i18n in every locale, and Storybook stories.
AddedFile — New File block tool. Tabbed empty state with upload (validation, progress bar, cancel), URL and drag-and-drop; per-type icon and tint; editable filename; consumer upload endpoints and download card. Rich preview modal dispatched by kind: PDF (top-layer modal with open-in-new-tab), Office (docx/xlsx/pptx via lazy renderers, xlsx parsed through JSZip), and text/code/markdown — including advanced markdown (math, footnotes, references, alerts, anchors, safe block-level raw HTML) with an animated Rendered ⇄ Raw toggle. Read-only support, i18n in every locale, and Storybook stories.AddedEmbed — Generic embed: frame arbitrary URLs through a gated resolver, offered in the paste menu behind thelinkPaste.allowGenericEmbedflag with anapi.configaccessor. Replace the source via an empty-state URL bar and an overlay more-menu item.AddedMigration — Complete Editor.js block-type coverage plus a drop-in UMD build; adapt legacy Editor.js inline tools andlinkTooldata.AddedPlayground — Block-states selector as a fixed left side menu; real docx/xlsx/pptx, code and text samples for the File block; richer quarterly-budget sheet; File block wired into the editor demo.FixedTable — Resolve merged-cell coordinate bugs; preserve merges on load; split overlapped merges on paste so no destination data is dropped; keep empty cells editable on the read-only→edit toggle; harden input, clipboard and move-guard handling.FixedFile — Unbreak pptx preview; vertically center the preview modal; stop wrong-colour strips and toggle flicker during preview transitions; blockjavascript:URLs in download hrefs.FixedBuild — Make the published install self-contained (shipsrc, keep markdown and nanoid as runtime deps) so bundlephobia can build; green the self-contained-install and css-token audits.ChangedRefactor — Extract table visual-subsystem orchestration intoTableSubsystems; splitBlockOperationsinto focused worker classes; share the media uploader empty state across the image and file tools.ChangedCode — Cover every Prism token in both the light and dark themes.ChangedLint — Resolve all lint errors by root cause and mute advisory-only rules.ChangedDocs — Refresh the README tool list and entry points; add a File block tool reference entry.- FixedTypes — Declare
EmbedandBookmark(and theirdefaultBlockToolsentries) in the published@jackuait/blok/toolstypes. The runtime exported them in 0.15.0 but the.d.tsdid not, soimport { Embed, Bookmark }failed to typecheck. Link Paste — Pasting a URL now offers a Notion-style menu to keep it as a link, or convert it into a Bookmark card or rich Embed block. The pasted link shows immediately with the menu anchored at its end, and menu labels name the detected link type via provider metadata.
AddedLink Paste — Pasting a URL now offers a Notion-style menu to keep it as a link, or convert it into a Bookmark card or rich Embed block. The pasted link shows immediately with the menu anchored at its end, and menu labels name the detected link type via provider metadata.AddedEmbed — Worldwide embed registry covering ~115 services across video, audio, social, documents, design and developer domains, including Google published docs/forms and draw.io. Per-source minimum resize widths keep each provider's iframe legible, and fixed-width providers hug their content with figure, handles and toolbar.AddedBookmark — Notion-parity bookmark card with a dev unfurl endpoint; crawler-UA retry recovers metadata from bot-blocked sites.AddedPlayground — Smooth cross-fade theme switching via View Transitions, plus an Airbnb-style neutral redesign.FixedEmbed — Preserve the live iframe across every editor action: caption and alignment toggles now apply in place instead of reloading the player. Selection highlight hugs the figure dimensions.FixedDrag & Drop — FLIP-animate the column drop moment and slim the vertical drop bar to read like the horizontal line.FixedSecurity — Harden URL-scheme filtering and neutralize XSS gaps in markdown paste, the inline link tool, and the paste/render pipeline.FixedTools — ImplementsetReadOnlyon embed, bookmark and column tools so read-only toggles in place without a full re-render.FixedIcons — Unify the icon set on the 20×20 / 1.25 house spec; refine heading family, quote, caption, pencil, cells, toggles, and numbered-list glyphs.FixedCI — Pin Node 24.14.1 to dodge a Playwright install hang; share Playwright setup to stop Storybook browser install hanging; repair 6 failing CI specs (5 stale expectations, 1 real drop-indicator regression).ChangedDependencies — Resolve all 52 open Dependabot alerts; bump brace-expansion, ws, smol-toml.ChangedTests — Embed/bookmark/link stories with screenshot baselines, wave-2 embed visual-regression baselines, verified real sample URLs replacing fixtures, refreshedmain.cssgolden snapshot.ChangedDocs & Playground — Embed, bookmark and link entries in tools data and the editor demo.- AddedTools — Register the Columns tool with a single
Columnsgroup key. Tool-group "provides" manifests expand into their underlying block tools duringprepare(), so consumers add one key instead of wiring each block.FixedTools — ExportColumnsfrom public types for single-key registration; keepdefaultBlockToolssettings-only so the group key forwards settings without re-registering. Columns — New side-by-side layout tool (#67). Create 2–5 column presets from the toolbox, or drag a block beside another to spawn a column. Drop anywhere left/right of a block to make a new column, or into a column body to stack inside it. Columns nest, auto-unwrap when emptied, and stack vertically on narrow viewports.
AddedColumns — New side-by-side layout tool (#67). Create 2–5 column presets from the toolbox, or drag a block beside another to spawn a column. Drop anywhere left/right of a block to make a new column, or into a column body to stack inside it. Columns nest, auto-unwrap when emptied, and stack vertically on narrow viewports.AddedColumns — "Turn into columns" command wraps a multi-block selection into a column layout, available from the Convert-to menu.AddedColumns — Hover-revealed resize separators between columns: drag to resize, keyboard-resizable with ARIA slider semantics, double-click a divider to equalize widths.AddedColumns — Horizontal arrow keys traverse between sibling columns; new columns animate in Notion-style.AddedInline Toolbar — Appears instantly on selection release, no animation delay.FixedInline Toolbar — Removed entry animation that delayed appearance.Changedi18n — Column resize aria-labels and turn-into-columns strings across all locales.ChangedCI — Repair unit tests, e2e merge, and mirror push on master; mirror push works for both branch and tag events.ChangedTests — Exhaustive block-in-column compatibility suite, live-drag lifecycle specs for every block type, multi-select block-settings header i18n regression.ChangedPlayground — Columns example in the editor demo and block-states gallery.- FixedRead-Only — Collapse the empty bottom click-to-add zone to 0px in read-only mode and restore the configured min-height when editing
- AddedImage — Auto-retry failed image loads with loading overlay; distinguish upload-failed vs broken-image error states; predict loading-placeholder dimensions from URL, SVG, and cache; pipe upload progress to bar (#41)AddedCodemod — Default migrated images to
size: 'full'and inherit the stretched flag into migrated image sizeAddedBlock Link — Highlight pulse on hash-link arrivalAddedRead-Only — Show copy-link menu on block hoverAddedPlayground — Add loading image state demo in block-states galleryFixedImage — Force full width and compact overlay for short images; reuse looping-arrows glyph for replace iconFixedPaste — Keep Google Docs images inside tables and stop double-bolding headings; prevent default page background collapsing to gray presetFixedTable — Recover migrated cell text detached by a pre-fix saveFixedToolbar — Align plus/drag handle with content lane for stretched blocksFixedBlock Settings — Anchor popover to trigger instead of (0,0); translate popover context labelFixedDatabase — Center block toolbar on the title lineChangedi18n — Translate strings identical to English across 25 localesChangedLint — Resolve all ESLint and tsc problemsChangedImage — Move inline upload-failed SVG to icons moduleChangedTests — Cover migrated cell content surviving load→save round-trip; fix CSS guard test failures from image loading shimmer Image — New image block tool (#66): drag-drop/URL/file upload, captions, alt text via inline popover, resize handles with symmetric growth, edge-pinned aspect-ratio resize, crop editor (rect/circle/oval) in modal, fullscreen lightbox with wheel/pinch zoom, drag-to-pan, rubber-band, alignment popover (left/center/right), block settings entries (size/download/copy-url), three-dots overflow menu for narrow images, empty/uploading/error states with unified card design, light-theme crop editor, legacy editor.js shape migration
AddedImage — New image block tool (#66): drag-drop/URL/file upload, captions, alt text via inline popover, resize handles with symmetric growth, edge-pinned aspect-ratio resize, crop editor (rect/circle/oval) in modal, fullscreen lightbox with wheel/pinch zoom, drag-to-pan, rubber-band, alignment popover (left/center/right), block settings entries (size/download/copy-url), three-dots overflow menu for narrow images, empty/uploading/error states with unified card design, light-theme crop editor, legacy editor.js shape migrationAddedCode — Migrate from Shiki to Prism.js for syntax highlighting with lazy grammar loading and class-based applier; add auto-indent and bracket expansion on Enter; add Mermaid highlighting with One Dark/Light palette; gutter line-number click focuses the lineAddedFonts — Bundle @fontsource fonts via generator script; newfontFamilySans/Serif/Mono/Handwritingconfig fields with CSS variable injection;font-display: swapfor body textAddedPopover — Render above all elements via CSS Top Layer; nested-submenu viewport clamping on both axes; close transition via ghost clone; tighter item sizing; end-of-list padding hidden on empty search; simpler animationsAddedToolbar — Hide plus and dots buttons while toolbox is open; place block settings popover left of the dots buttonAddedToolbox — Nowrap pill with tighter radius and unified plus/slash search stylingAddedPlayground — Icon gallery lightbox; block states gallery tab; settings panel shortcuts; hide header on scroll; logotype image exampleAddedCSS Variables — Tokenize radii, spacing, icon sizes, border widths, z-index ladder, duration/easing, typography; extract directrgbaliterals to palette tokens; migrate@applyarbitrary hex values; splitactions-icon/dividervars; add audit test and visual regression baselinesAddedDatabase — Match Notion card shadow and radius on kanban cards; showcase all 10 column color variantsAddedBlock Settings — Add shortcut keys to i18n with regression testsAddedIcons — Migrate inline SVGs to shared icon layerFixedInline Toolbar — Tighten item padding and radius; suppress toolbar inside code blocks; apply symmetric top/bottom paddingFixedCode — Pin caret color so it does not inherit Prism token colors; restore trailing<br>after highlight so Enter works once; refresh gutter/highlight after native paste; focus line end when clicking empty strip of short lines; scope inline-code styling to not leak into code block; supportcontenteditable="plaintext-only"and preserve view mode on undo; correct syntax highlighting offset calculationFixedToolbar — Reposition + / ⋮⋮ live while hovered block resizes; disable pointer-events on every actions descendant for left-edge blocks; keep slash search in inserted block after plus buttonFixedPopover — Distinguish synthesized hover from real hover; hide context label while searching; keep block settings menu visible and attached to dots triggerFixedBlock Manager — Skip cross-container auto-heal inside move groupFixedTooltip — Anchor wrapper withposition: fixedto survive page scroll; render above popover and survive UA stylesheetFixedFonts — Add error handling for font load failuresChangedStyles — Splitmain.cssinto 11 concern-filesChangedLicense — Add fork attribution and NOTICE fileChangedBuild — Replace shiki with prismjsChangedTests — Fix 60+ unit + E2E failures across the suite; add Prism integration test for all highlightable languagesChangedChore — Untrack.vscode; remove stale root files; add favicon to dev playground; drop.editorconfig- AddedBundles — Ship CJS (
require()) and IIFE (<script>tag / CDN) bundles alongside ESM; add"main","browser","unpkg", and"jsdelivr"fields topackage.jsonChangedREADME — Add installation section documenting ESM, CJS, and CDN usage - AddedToggle — Gray arrow icon when toggle body is emptyFixedDrag — Eliminate "wrong block dropped" with multi-layer stale-block defense; block paste, undo/redo, and move shortcuts during active drag; integrate drag-reparent with undo as a single stepFixedHierarchy — Reject dangling parentId at universal chokepoint; reconcile remote Yjs reparents; close remaining container drift vectors; exempt Yjs remote sync from dangling parent throwFixedPaste — Inherit container parent on replace-insert and x-blok root paste; harden container paste ejection across all container block typesFixedCallout — Restore plus button and drag handle; stop paste from ejecting children via stale contentIds; prevent Enter from inserting new block inside calloutFixedUndo — Collapse multi-block paste and alt-drag duplicate into one undo group; eliminate spurious entries from metadata-only writesFixedToolbar — Keep drag handle visible when editing inside table cellFixedInsert — Universally protect all Enter paths from nested-block leakFixedTable — Tighten list item spacing inside table cellsFixedYjs — Map 'no-capture' origin to local to prevent mid-op sync clobbering tool stateChangedYjs — Make
DocumentStore.ydocprivate; enforce local origin whitelist with exhaustive mapperChangedCI — Shard E2E tests via reusable workflow; add merge-reports job; run spec-file coverage validator on every PR; remove size-limit bundle size check - FixedTable — Normalize flat-array table child parents at every entry pointFixedData Model — Recursively expand legacy nested toggleList/callout bodies
- FixedTheme — Prevent nested editor instances from overriding parent theme on prepare
- AddedConfig — Replace
user.namewithuser.id+resolveUsercallback for multi-editor identity trackingAddedKeyboard — Del shortcut for block delete; markdown shortcuts for quote ("+ space) and code (``` + space) blocksFixedi18n — Use Blok locale for date formatting with full month names; strip trailing abbreviation suffixes for ru/uk localesFixedPopover — Display scroll haze instantly on open instead of fading inChangedDeps — Add lodash-es resolution to pin ^4.18.0 - AddedDatabase — DatabaseView rendering layer with kanban board DOMFixedi18n — Localize hardcoded "Last edited" strings in block settings footer; add missing translations across 67 localesFixedTheme — Expose theme API before
isReadyto prevent dark theme race conditionChangedLint — Resolve all 226 lint issues across source and test filesChangedCI — Enable Corepack before setup-node to resolve Yarn version mismatch; remove dead version-check jobChangedTests — Resolve 119 failing tests across E2E, unit, and docs suites - AddedDatabase — Kanban board view with drag-and-drop cards and columns, card drawer with nested editor, inline title editing, list view with collapsible sections, multi-view tabs with drag reorder, property-based data model, column controls, backend sync, and read-only modeAddedCopy block link —
CopyLinkTuneblock tune with Cmd+Ctrl+L shortcut and automatic scroll-to-block on URL hash loadAddedBlock edit metadata — TracklastEditedAt/lastEditedByon every block mutation with Yjs sync, saved output inclusion, and block settings footer display; newuserconfig optionAddedPopover — Scroll haze indicators on popover listsAddedShortcut keys — Render shortcut keys as SVG icons with readable tooltip on hoverFixedInline tools — Preserve trailing nbsp through format/unformat cycles; preserve trailing spaces when applying inline formatting; extend trailing-whitespace range detection; unwrap whitespace-only bold ancestors when un-bolding partial selectionFixedBlock — DefaultlastEditedAttoDate.now()so footer always shows; preserve user-provided block IDs and deduplicate on render; validate block ID format in constructorFixedPaste — Prevent new table block when pasting into table cell with lost focus; handle hsl/hsla color formatsFixedScroll to block — GuarddecodeURIComponentagainst malformed URL hash; encode block ID in URL hashFixedTheme — Prevent nested editor from resetting parent theme - FixedTable — Guard
addBlockToCellandsetCellBlocksagainst writing into covered (merged) cells; resolve paste target and copy source coordinates from model attributes instead of DOM visual position; fix overlay/pill missing and wrong merge/split button after rect expansion; expand selection rect to include full spans of merged cells; use logical cell coordinates ingetCellPosition; don't intercept copy/cut when user has text selected in a single cell;reindexCoordinatesassigns model coordinates instead of DOM physical indices; center row grip on merged cell usinggetBoundingClientRectFixedToolbar — CorrectmarginLeftfor nested blocks and popover position when scrolled; restore focus to originally-typed block after plus+EscapeFixedToolbox — Position popover at caret when inside nested blocks (toggle/callout)FixedKeyboard — Prevent text-jumping by preserving focus on toolbar interactions Code block — New
CodeToolwith syntax highlighting (via Shiki), line numbers toggle, language selector popover, copy button, wrap toggle, and preview tab for KaTeX/Mermaid renderingAddedCode block — NewCodeToolwith syntax highlighting (via Shiki), line numbers toggle, language selector popover, copy button, wrap toggle, and preview tab for KaTeX/Mermaid renderingAddedInline code — NewInlineCodeToolwith CMD+E shortcutAddedQuote block — Notion-style quote block with size options submenuAddedDivider block — Horizontal rule block with---markdown shortcutAddedCallout block — Callout block with emoji picker and skin tone persistenceAddedToggle list — Collapsible toggle list block with drag & drop support inside toggles ([#46](https://github.com/JackUait/blok/pull/46), [#52](https://github.com/JackUait/blok/pull/52))AddedToggle headings — Toggle heading blocks with markdown shortcuts (>#,>##,>###) and body placeholderAddedMarker inline tool — Color text/background inline tool with color picker and dark mode supportAddedUnderline & Strikethrough — New inline tools with CMD+U and CMD+SHIFT+S shortcutsAddedTable enhancements — Cell color picker, cell placement picker, HTML<table>rendering, corner drag, Tab/Arrow escape from cells, and cross-table block protection ([#38](https://github.com/JackUait/blok/pull/38), [#45](https://github.com/JackUait/blok/pull/45), [#63](https://github.com/JackUait/blok/pull/63))AddedMarkdown import —importMarkdown()API method and paste handler with GFM support including math (KaTeX) extensionsAddedReact adapter —useBlokhook andBlokContentcomponent for React integrationAddedRead-only toggle — Seamless in-placereadonlymode toggle with scroll position preservationAddedEditor width API —editor.widthnamespace withWidthManagermodule andconfig.widthoptionsAddedContent alignment —config.style.contentAlignoption for global block content alignmentAddedFont family config —config.style.fontFamilyoption for editor and popover typographyAddedTheme API —ThemeAPImodule for programmatic dark/light theme controlAddedFuzzy toolbox search — Ranked fuzzy search in slash menu with animated filteringAddedToolbox plus button — Opens blocks menu directly without inserting/AddedLink suggestion chip — URL type detection chip in inline toolbarAddedGoogle Docs paste — Expand<details>tags into toggle blocks with parent-child wiringAddedblok-cli package — New@jackuait/blok-clipackage withconvert(HTML→JSON) andconvert-gdocscommandsAddedi18n search terms — Multilingual toolbox search viasearchTermKeysacross all 68 localesFixedDrag & drop — Toggle hierarchy, ghost preview, subtree depth preservation, and spring-load auto-expand for closed togglesFixedToolbar — Drag handle reachability, left-edge overflow, and actions not intercepting toggle arrow clicksFixedInline toolbar — Cross-block selection positioning, background element cleanup on closeFixedTable — Cross-table block stealing, undo/redo focus, cell selection border persistence, and arrow key navigation between blocksFixedMarker — Partial selection color removal, dark theme palette, and active color display on toolbar buttonFixedToggle — Backspace/Delete boundary crossing, undo atomicity for Enter, children DOM nesting, and collapse in read-only modeFixedList — Tab indent for multi-selected items, depth reduction cascade on outdent, and bullet marker pinningFixedPaste — Table cell content appearing outside table, marker formatting preservation, and math formula detectionCRDT-based undo/redo — The undo/redo system now uses Conflict-Free Replicated Data Type principles for better conflict resolution and history tracking
AddedCRDT-based undo/redo — The undo/redo system now uses Conflict-Free Replicated Data Type principles for better conflict resolution and history trackingFixedtoolbar hover behavior after cross-block selection — The inline toolbar now resets its positioning state when extending selections across multiple blocksFixedPatternPasteEvent for internal cut/paste — Internal cut and paste operations now emit PatternPasteEvent, so external code can react to all clipboard actions- FixedTailwind CSS conflicts — Fixed CSS conflicts that caused external plugins to break by isolating Tailwind's style precedenceAddeddata-blok-header-level attribute — Headers in the formatting popover now include a
data-blok-header-levelattribute for styling and testing hooks - Addedundo/redo — Added keyboard shortcuts (Ctrl/Cmd+Z and Ctrl/Cmd+Shift+Z) for editing history navigation
- AddedRTL language support — Added translations for Hebrew, Persian, Urdu, Yiddish, Pashto, Sindhi, Uyghur, Kurdish, and Dhivehi with right-to-left layoutAddedEastern European languages — Added Czech, Romanian, and Hungarian translationsAddedSoutheast Asian languages — Added Thai, Ukrainian, and Greek translationsAddedSouth Asian languages — Added Hindi, Bengali, Indonesian, and Vietnamese translationsAddedTurkic languages — Added Turkish and Azerbaijani translationsAddedArabic — Added Arabic translation with RTL supportAddedNorthern European languages — Added Dutch, Polish, and Swedish translationsAddedKorean, Japanese, Italian, Portuguese, German, French, Spanish — Added translationsAddedArmenian, Chinese, Russian — Added translationsAddedrename checklist to to-do list — Changed terminology from "checklist" to "to-do list"Addeddrag & drop — Rewrote the drag and drop system for smoother interactionsAddedflat data model — Changed from nested to flat structure using
parentIdandcontentIdsreferencesAddedlists: flat data model — List items now use the flat data structureAddedkeyboard navigation — Added keyboard shortcuts for editing without the mouseAddedlist tools — Added numbered lists, ordered (nested) lists, and to-do lists with checkboxesAddedparagraph tool: custom configuration — The paragraph tool supports custom configuration for placeholder text and stylingAddedheader tool: custom configuration — The header tool supports custom configuration for levels and placeholder textAddednavigation mode — Added arrow key navigation through blocks, separate from text editingAddedUX improvements — Focus management, cursor positioning, and block interactionsFixedtranslation keys: camelCase — Converted all translation keys to camelCaseFixedtranslation key parsing — Fixed nested translation key parsingFixedremove redundant translation keys — Cleaned up duplicate and unused translation keysFixedfix Russian translation — Corrected a missing word in the Russian translationFixedfake selection display — Fixed how fake (visual-only) selections renderFixedclose inline toolbar on outside click — The inline toolbar now closes when clicking outside the editorFixedtoolbar centering — Fixed toolbar positioning to stay centered regardless of content width - Changedcodemod improvements — Better pattern matching and safer transformations for the Editor.js migration
bundle paragraph and header tools — These tools are now included by default in the core bundle
Addedbundle paragraph and header tools — These tools are now included by default in the core bundledrag & drop — Block reordering via the block handle (☰) icon
Addeddrag & drop — Block reordering via the block handle (☰) iconFixedremove debug logging — Cleaned up console.log statements and resolved performance bottlenecksChangedrebrand to Blok — Updated logos, color schemes, and documentationfork from Editor.js — Blok forked from Editor.js, preserving the block-based editing architecture
Changedfork from Editor.js — Blok forked from Editor.js, preserving the block-based editing architectureChangedinitial feature set — Block management, inline formatting, slash toolbox, and plugin system