Refresh account usage after sign-in and align the anonymous edge limiter with cookie sessions.
Changes
- Refresh developer usage after cookie identity hydration, including cold account reloads.
- Exclude CORS preflights and the existing session-cookie credential marker from Redline anonymous edge admission; backend identity and quota validation remain required.
- Deploy the targeted Redline edge rule through the existing CloudFormation stack in a dedicated CI lane, preserving deployed parameters and unrelated rules.
Keep account state consistent after logout and use the correct Redline API environment.
Changes
- Clear cached account state when the server rejects an expired or revoked session, while preserving it during temporary outages.
- Support cookie-only developer key creation and revocation; retain active key state if revocation fails.
- Match exact customer and developer API environments, including TEST.
- Fail live smoke setup before creating fixtures when environment authentication configuration is missing.
Preserves system theme preference across embeds, makes compare toolbar compact, adds high-contrast syntax highlighting in light mode, implements Word Track Changes job polling in docx compare view, and adds zoom/layout controls with prominent change highlights to the page render view.
Fixed
- Embedded iframes (/embed/*) and demo showcases now apply theme classes and CSS color-scheme locally to their document root without mutating parent localStorage[bookcicleTheme].
- Standalone Redline now honors and dynamically tracks OS prefers-color-scheme changes when in system mode.
- Resolved an unhandled ReferenceError in playground text comparisons that occurred when mounting source pages on non-document diffs.
- Word Track Changes export polling in docx compare view now polls job completion and exposes the download link when ready instead of remaining queued indefinitely.
- Syntax highlighting tokens in light mode now use WCAG AAA accessible color variables while preserving dark terminal colors in dark mode and playground code blocks.
Changed
- Comparison document toolbar and track changes banner now feature a compact, streamlined layout preventing metadata collisions and overflow on narrower viewports.
- Page render view now includes Side-by-Side and Single Column (Large) view modes, interactive zoom controls (Fit, 100%, 125%, 150%+), high-visibility outlines on change marks, and per-page change count badges.
Validation
- Playwright E2E and Jest unit test suites verify system theme persistence, embed style scoping, page rendering controls, and document comparisons across all supported formats.
- repo
- bookcicle/ui
Preserves system theme preference across embeds, makes compare toolbar compact, adds high-contrast syntax highlighting in light mode, implements Word Track Changes job polling in docx compare view, and adds zoom/layout controls with prominent change highlights to the page render view.
Fixed
- Embedded iframes (/embed/*) and demo showcases now apply theme classes and CSS color-scheme locally to their document root without mutating parent localStorage[bookcicleTheme].
- Standalone Redline now honors and dynamically tracks OS prefers-color-scheme changes when in system mode.
- Resolved an unhandled ReferenceError in playground text comparisons that occurred when mounting source pages on non-document diffs.
- Word Track Changes export polling in docx compare view now polls job completion and exposes the download link when ready instead of remaining queued indefinitely.
- Syntax highlighting tokens in light mode now use WCAG AAA accessible color variables while preserving dark terminal colors in dark mode and playground code blocks.
Changed
- Comparison document toolbar and track changes banner now feature a compact, streamlined layout preventing metadata collisions and overflow on narrower viewports.
- Page render view now includes Side-by-Side and Single Column (Large) view modes, interactive zoom controls (Fit, 100%, 125%, 150%+), high-visibility outlines on change marks, and per-page change count badges.
Validation
- Playwright E2E and Jest unit test suites verify system theme persistence, embed style scoping, page rendering controls, and document comparisons across all supported formats.
- repo
- bookcicle/ui
Start with a compact file picker, then review changes in the document dashboard.
Changes
- Make the document picker tiles smaller while keeping clear labels and visible file names.
- Center comparison and save messages with comfortable spacing and readable wrapping.
- Open completed comparisons directly in the document dashboard with a collapsed sidebar and a plus button for another comparison.
- Let guests review pages and accept or reject text edits locally; sign in to save, manage documents, and request supported subscriber artifacts.
- Keep local review choices separate from the original saved comparison and Word artifact.
Start with a compact file picker, then review changes in the document dashboard.
Changes
- Make the document picker tiles smaller while keeping clear labels and visible file names.
- Center comparison and save messages with comfortable spacing and readable wrapping.
- Open completed comparisons directly in the document dashboard with a collapsed sidebar and a plus button for another comparison.
- Let guests review pages and accept or reject text edits locally; sign in to save, manage documents, and request supported subscriber artifacts.
- Keep local review choices separate from the original saved comparison and Word artifact.
Start with a compact file picker, then review changes in the document dashboard.
Changes
- Make the document picker tiles smaller while keeping clear labels and visible file names.
- Center comparison and save messages with comfortable spacing and readable wrapping.
- Open completed comparisons directly in the document dashboard with a collapsed sidebar and a plus button for another comparison.
- Let guests review pages and accept or reject text edits locally; sign in to save, manage documents, and request supported subscriber artifacts.
- Keep local review choices separate from the original saved comparison and Word artifact.
Remediated security finding R01 by replacing predictable fallback signing derivations with Secrets Manager-backed HMAC-SHA-256 tokens and fail-closed key validation.
Security
- Removed predictable signing fallback derivation from bucket and environment names.
- Implemented RFC 2104 / RFC 4231 HMAC-SHA-256 v2 tokens with explicit key ID, expiration, clock skew bounding, and constant-time signature verification.
- Configured Secrets Manager resolution with fail-closed semantics for missing or malformed keys.
- Restricted sample and demo bypasses to an exact approved synthetic fixture allowlist.
- repo
- bookcicle/ui
- issue
- https://github.com/bookcicle/ui/issues/1052
Document comparison services receive hardened viewer credentials, protected diagnostics, and fail-closed request admission.
Security
- Shared comparison viewers require secure, scoped credentials with expiration and audience validation.
- Document diagnostics and authentication details are protected from application logs.
- Comparison admission fails safely when its shared rate limiter is unavailable.
Operations
- Dependency and image security checks protect the released comparison services.
- Production alarm routing is verified with the service configuration before traffic is advanced.
- repo
- bookcicle/ui
- component Sources
- [object Object]
Compare HTML, DOCX, and text-based PDF documents, review changes, and integrate comparison into your application.
Added
- Document comparison with change navigation, deterministic comparison statistics, and embeddable views.
- Track Changes review controls and integration callbacks for supported review workflows.
- API access and subscriber Word exports, with account plan controls and usage information.
- Optional document source-page previews provide a read-only view alongside the comparison.
Improved
- DOCX and PDF comparisons preserve document structure and source pages more faithfully, with automatic HTML recovery where needed.
- Each comparison format keeps its own inputs and results.
- Developer documentation includes search, stable section links, and improved mobile navigation.
- Page controls, zoom, theme handling, comparison highlights, and loading states are clearer and more responsive.
- Word Track Changes downloads show their preparation state and follow the correct download route.
- Comparison and optional page-rendering timings are shown separately.
Security
- Shared document viewing requires secure, scoped credentials, and comparison diagnostics protect document content and authentication details.
Availability
- DOCX comparison is in Early Access. Scanned-document OCR and visual image comparison are not included.
- Public one-time Word downloads and AI-generated comparison summaries are not part of this launch.
- repo
- bookcicle/ui
- candidate Seed
- 08e1368fa284cd1cf4a4f6368cc2ff9c441ec489
- component Sources
- [object Object]
Project and billing services are prepared for the Studio and Redline production origins.
Compatibility
- Account and billing services admit only the matching customer and developer origins in each environment.
- Overage processing uses existing Stripe subscriptions and retains subscription identity through webhook updates.
- Membership-period quota activation remains disabled until the coordinated production check passes.
- repo
- bookcicle/ui
Redline policies are available directly on the site.
Added
- Dedicated Privacy Policy, Terms of Service, Cookie Policy and Security views with local navigation and direct links.
- Security includes SOC 2 Type II readiness status and makes clear that no SOC 2 examination has been completed.
- Policies describe comparison retention, shared-link access and privacy choices without implementation details.
- Completed shared controller and release compatibility checks for the policy rollout.
- Policy section links retain their page during initial navigation and loading.
- Clarified encryption for service endpoint connections and the stronger protection for supported credential values.
- repo
- bookcicle/ui
Redline policies are available directly on the site.
Added
- Dedicated Privacy Policy, Terms of Service, Cookie Policy and Security views with local navigation and direct links.
- Security includes SOC 2 Type II readiness status and makes clear that no SOC 2 examination has been completed.
- Policies describe comparison retention, shared-link access and privacy choices without implementation details.
- Completed shared controller and release compatibility checks for the policy rollout.
- Policy section links retain their page during initial navigation and loading.
- Clarified encryption for service endpoint connections and the stronger protection for supported credential values.
- repo
- bookcicle/ui
Public copy focuses on capabilities and documented API behavior.
Improved
- Removed implementation details from homepage and docs copy, demo content, historical release notes and public benchmark downloads. Timing observations are unchanged.
- Page-preview identifiers, including built-in samples, use product terminology. The viewer supports existing identifiers and continues to show layout guidance.
- Generated previews and built-in sample downloads use product branding while retaining the document’s title, author and other descriptive metadata. Original PDFs remain unchanged.
- repo
- bookcicle/ui
Public copy focuses on capabilities and documented API behavior.
Improved
- Removed implementation details from homepage and docs copy, demo content, historical release notes and public benchmark downloads. Timing observations are unchanged.
- Page-preview identifiers, including built-in samples, use product terminology. The viewer supports existing identifiers and continues to show layout guidance.
- Generated previews and built-in sample downloads use product branding while retaining the document’s title, author and other descriptive metadata. Original PDFs remain unchanged.
- repo
- bookcicle/ui
Unified advanced options collapsible panel on playground with complete visual page renders and pre-built tracked changes Word document downloads for built-in samples.
Improved
- Grouped visual page rendering and Word Track Changes export options into matching rows within an 'Advanced options' collapsible panel in the playground.
- Embedded complete document page previews and a Word Track Changes download for built-in samples, ensuring CSP compliance without blob URLs.
- Enabled visual page comparison preview for default built-in document samples (DOCX and PDF) when page rendering is checked, rendering side-by-side pages with highlighted insertions and deletions.
- Added instant pre-built Word Track Changes (.docx) download for the built-in service agreement sample without waiting for document processing.
Testing and validation
- Added E2E coverage asserting visual page rendering and instant pre-built Word Track Changes export on built-in samples without API or upload calls.
- Verified anonymous access preserves disabled export controls while allowing visual page rendering.
- repo
- bookcicle/ui
Unified advanced options collapsible panel on playground with complete visual page renders and pre-built tracked changes Word document downloads for built-in samples.
Improved
- Grouped visual page rendering and Word Track Changes export options into matching rows within an 'Advanced options' collapsible panel in the playground.
- Embedded complete document page previews and a Word Track Changes download for built-in samples, ensuring CSP compliance without blob URLs.
- Enabled visual page comparison preview for default built-in document samples (DOCX and PDF) when page rendering is checked, rendering side-by-side pages with highlighted insertions and deletions.
- Added instant pre-built Word Track Changes (.docx) download for the built-in service agreement sample without waiting for document processing.
Testing and validation
- Added E2E coverage asserting visual page rendering and instant pre-built Word Track Changes export on built-in samples without API or upload calls.
- Verified anonymous access preserves disabled export controls while allowing visual page rendering.
- repo
- bookcicle/ui
Added a responsive spinner glyph and active state when clicking Word Track Changes downloads, and provided immediate status feedback while exports are prepared.
Added
- Added .rl-spinner-glyph animation and active downloading state to Word Track Changes download buttons, showing real-time visual feedback upon click before smoothly resetting.
- Displayed immediate 'Preparing' status badges with animated spinner glyphs inside the Track Changes banner during document comparison so users are continuously informed while exports are generated.
Improved
- Enhanced playground and DOCX comparison lanes to retain the Word Track Changes status banner with active preparation indicators rather than leaving the interface in a suspended state prior to download availability.
- Added spinner glyph indicators to queued and processing polling states for background Word export jobs.
- repo
- bookcicle/ui
Added a responsive spinner glyph and active state when clicking Word Track Changes downloads, and provided immediate status feedback while exports are prepared.
Added
- Added .rl-spinner-glyph animation and active downloading state to Word Track Changes download buttons, showing real-time visual feedback upon click before smoothly resetting.
- Displayed immediate 'Preparing' status badges with animated spinner glyphs inside the Track Changes banner during document comparison so users are continuously informed while exports are generated.
Improved
- Enhanced playground and DOCX comparison lanes to retain the Word Track Changes status banner with active preparation indicators rather than leaving the interface in a suspended state prior to download availability.
- Added spinner glyph indicators to queued and processing polling states for background Word export jobs.
- repo
- bookcicle/ui
Configured Content-Disposition attachment headers for sample tracked changes documents and streamlined browser download triggers to remain in-page.
Fixed
- Configured explicit Content-Disposition attachment metadata on deployment for sample Word Track Changes documents to guarantee native browser downloads without navigating to fallback routes.
- Prevented single-page routing from intercepting file download links and static asset paths, ensuring that clicking 'Download .docx' triggers native browser attachment downloads instead of navigating to fallback error screens.
- Removed target=_blank from playground and DOCX lane tracked changes download links to retain active session context and prevent stray browser tabs.
- repo
- bookcicle/ui
Redline
development