F um

.github/workflows/ci.yml

@@ -0,0 +1,55 @@
+name: CI
+
+on:
+  push:
+    branches:
+      - '**'
+  pull_request:
+
+concurrency:
+  group: ci-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  check:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+
+      - name: Use Node.js
+        uses: actions/setup-node@v6
+        with:
+          node-version: 24
+          cache: 'npm'
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Cache Playwright browsers
+        uses: actions/cache@v4
+        with:
+          path: ~/.cache/ms-playwright
+          key: playwright-${{ runner.os }}-${{ hashFiles('package-lock.json') }}
+
+      - name: Install Playwright browser
+        run: npx playwright install --with-deps chromium
+
+      - name: Typecheck
+        run: npm run typecheck
+
+      - name: Lint
+        run: npm run lint
+
+      - name: Unit tests
+        run: npm test
+
+      - name: E2E tests
+        run: npm run test:e2e
+
+      - name: Upload Playwright report
+        if: failure()
+        uses: actions/upload-artifact@v4
+        with:
+          name: playwright-report
+          path: playwright-report/
+          retention-days: 7

.github/workflows/release.yml

@@ -11,7 +11,43 @@ permissions:
   attestations: write
 
 jobs:
+  test:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+
+      - name: Use Node.js
+        uses: actions/setup-node@v6
+        with:
+          node-version: 24
+          cache: 'npm'
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Cache Playwright browsers
+        uses: actions/cache@v4
+        with:
+          path: ~/.cache/ms-playwright
+          key: playwright-${{ runner.os }}-${{ hashFiles('package-lock.json') }}
+
+      - name: Install Playwright browser
+        run: npx playwright install --with-deps chromium
+
+      - name: Typecheck
+        run: npm run typecheck
+
+      - name: Lint
+        run: npm run lint
+
+      - name: Unit tests
+        run: npm test
+
+      - name: E2E tests
+        run: npm run test:e2e
+
   build:
+    needs: test
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v6

.gitignore

@@ -16,3 +16,6 @@ local/
 # Browser-test harness build output (see scripts/build-harness.mjs)
 dist-harness/
 /.harness
+# Playwright E2E output (see playwright.config.ts)
+/test-results/
+/playwright-report/

.zcodeignore

@@ -0,0 +1,49 @@
+node_modules/
+dist/
+local/
+*.log
+.playwright-mcp/
+.npmrc
+.obsidian
+.DS_Store
+.inscriptum-log.jsonl
+/.zcode
+/docs/superpowers/
+/export
+# Local registry
+/kley.lock
+/.kley
+# Browser-test harness build output (see scripts/build-harness.mjs)
+dist-harness/
+/.harness
+
+# ===== ↑ 以上同步自 .gitignore（「从 .gitignore 同步」只重写以上部分）=====
+.git/
+.hg/
+.svn/
+bower_components/
+jspm_packages/
+__pycache__/
+site-packages/
+venv/
+coverage/
+htmlcov/
+lcov-report/
+cmakefiles/
+cmake-build-*/
+bazel-*/
+pods/
+deriveddata/
+storybook-static/
+playwright-report/
+test-results/
+allure-results/
+allure-report/
+cdk.out/
+*.egg-info/
+*.dist-info/
+eggs/
+pip-wheel-metadata/
+wheels/
+# ----- ↑ 以上为 ZCode 默认排除规则（自定义规则请写在本行下方，不会被同步/恢复改动）-----
+# 自定义规则写在下方（本行提示可删除）

CHANGELOG.md

@@ -5,6 +5,27 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [Unreleased]
+
+### Added
+
+- New document type: notepad (`.um`) — a single file that holds an ordered list of pages, edited one under another like one document. Pages can be added, duplicated, deleted (with confirmation and undo), renamed inline and reordered by drag & drop; each page can be collapsed, and its expanded/collapsed state is remembered.
+- The first page is the notepad's title page — a fixed cover (title + summary) that can't be deleted, moved or renamed. Other pages don't need a title: their display title comes from the first line.
+- Notepad navigation drawer (☰): lists all pages and jumps to the clicked one (smooth scrolling).
+- Notebook-wide search (`Cmd/Ctrl+F`): finds across all pages, including collapsed ones, and jumps to the match.
+- Images added inside a notepad are packed into the `.um` file itself, so the notepad is self-contained; other attachments stay as regular vault files.
+- Pages created in a newer version of the plugin open with a "created in a newer version" notice instead of an editor and are preserved untouched on save.
+- "New notepad" command and a Type selector (Note/Notepad) in the "New inscriptum" modal.
+
+### Fixed
+
+- Saving a `.um` container can no longer clobber its own manifest or note documents: asset descriptors naming a protected archive path (e.g. a hand-edited registry) are skipped at write time instead of overwriting the required entries.
+- Assets are no longer garbage-collected while a notepad has a page this editor cannot interpret (newer version, unknown family, failed migration): the page is preserved verbatim, so its media stays in the archive even if its references use a shape this editor does not know.
+- Opening a `.um` file is size-guarded against zip bombs: archives over a compressed-size cap are rejected before being read into memory, and decompression is bounded by a cap on the total inflated size — a hostile `.um` fails cleanly with a "too large" error instead of exhausting memory.
+- Notepad saves no longer lose edits made while a save is in flight.
+- Image layouts in notepads are scoped to their page: "full width" no longer spans the whole window, and wrap-layout images no longer float into the following pages.
+- Toggling the plugin off/on without an app restart no longer breaks images/attachments.
+
 ## [0.9.0] - 2026-09-18
 
 ### Added

README.md

@@ -104,6 +104,34 @@ Run tests:
 npm test
 ```
 
+### E2E tests
+
+Browser tests run the real editor (ProseMirror + extensions) in Chromium via
+Playwright, against a harness page with a shimmed `obsidian` module
+(`src/browser-harness/`). Install the browser once, then run:
+
+```bash
+npx playwright install chromium
+npm run test:e2e
+```
+
+Useful variants: `npm run test:e2e:headed` (visible browser) and
+`npm run test:e2e:ui` (Playwright UI mode). CI runs the same suite on every
+push (see `.github/workflows/ci.yml`).
+
+Type-check the codebase (`vite build` does not check types; CI runs this on
+every push, so keep it clean):
+
+```bash
+npm run typecheck
+```
+
+For a continuous check while refactoring:
+
+```bash
+npm run typecheck:watch
+```
+
 ## Release
 
 Releases are built automatically by GitHub Actions.

eslint.config.mts

@@ -36,7 +36,7 @@ export default defineConfig(
       },
       parserOptions: {
         projectService: {
-          allowDefaultProject: ["eslint.config.mts"],
+          allowDefaultProject: ["eslint.config.mts", "playwright.config.ts"],
         },
         tsconfigRootDir: import.meta.dirname,
       },
@@ -115,6 +115,15 @@ export default defineConfig(
       "obsidianmd/hardcoded-config-path": "off",
     },
   },
+  {
+    // The Playwright config is a Node script (process.env.CI), not plugin code.
+    files: ["playwright.config.ts"],
+    languageOptions: {
+      globals: {
+        ...globals.node,
+      },
+    },
+  },
   {
     // The review does not report unused disable directives (only missing
     // descriptions via `eslint-comments/require-description`), so disable

package.json

@@ -7,12 +7,18 @@
   "scripts": {
     "dev": "vite build --watch --mode development",
     "build": "vite build",
+    "typecheck": "tsc --noEmit",
+    "typecheck:watch": "tsc --noEmit --watch --preserveWatchOutput",
     "android:debug": "node scripts/android-debug.mjs",
     "ios:debug": "node scripts/ios-debug.mjs",
     "deploy": "cp dist/main.js manifest.json dist/styles.css .obsidian/plugins/inscriptum/",
     "release": "node scripts/release.mjs",
     "test": "vitest run",
     "test:watch": "vitest",
+    "build:harness": "node scripts/build-harness.mjs",
+    "test:e2e": "npm run build:harness && playwright test",
+    "test:e2e:headed": "npm run build:harness && playwright test --headed",
+    "test:e2e:ui": "npm run build:harness && playwright test --ui",
     "lint": "eslint .",
     "lint:fix": "eslint . --fix",
     "format": "biome format --write .",
@@ -22,6 +28,7 @@
     "@web-companions/gfc": "2.5.0",
     "@web-companions/h": "0.3.4",
     "@web-companions/lit": "0.2.1",
+    "fflate": "0.8.3",
     "highlight.js": "11.11.1",
     "linkifyjs": "4.3.3",
     "lit-html": "2.8.0",
@@ -52,6 +59,7 @@
     "@biomejs/biome": "2.5.13",
     "@eslint/js": "9.39.5",
     "@eslint/json": "0.14.0",
+    "@playwright/test": "1.63.0",
     "@types/node": "26.1.2",
     "babel-plugin-transform-jsx-to-tt": "0.5.0",
     "eslint": "9.39.5",

playwright.config.ts

@@ -0,0 +1,31 @@
+import { defineConfig, devices } from "@playwright/test";
+
+const PORT = 4599;
+const baseURL = `http://127.0.0.1:${PORT}`;
+
+export default defineConfig({
+  testDir: "tests/e2e",
+  timeout: 30_000,
+  expect: { timeout: 5_000 },
+  fullyParallel: true,
+  forbidOnly: Boolean(process.env.CI),
+  retries: process.env.CI ? 1 : 0,
+  reporter: process.env.CI
+    ? [["github"], ["html", { open: "never" }]]
+    : [["list"]],
+  use: {
+    baseURL,
+    screenshot: "only-on-failure",
+    trace: "retain-on-failure",
+  },
+  projects: [
+    // The editor uses standard DOM APIs; Chromium covers the e2e surface.
+    { name: "chromium", use: { ...devices["Desktop Chrome"] } },
+  ],
+  webServer: {
+    command: "node scripts/e2e-serve.mjs",
+    url: `${baseURL}/tests/e2e/harness/index.html`,
+    reuseExistingServer: !process.env.CI,
+    timeout: 15_000,
+  },
+});