feat(review): add bounded review contract surface

README.md

@@ -70,6 +70,8 @@ runtime.
 | Envelope identity | `@contextualwisdomlab/cwl-editor/envelope-identity` | Framework-independent bounded schema identity for host-owned migration routing |
 | Revision evidence | `@contextualwisdomlab/cwl-editor/revision-evidence` | Framework-independent canonical envelope, strong revision, and transition evidence |
 | Text-position selector | `@contextualwisdomlab/cwl-editor/text-position-selector` | React-free deterministic W3C `TextPositionSelector` projection core |
+| Review target core | `@contextualwisdomlab/cwl-editor/review` | `implemented_on_active_pr` — React-free deterministic exact-revision review targets; durable review records and policy remain host-owned |
+| Review React adapter | `@contextualwisdomlab/cwl-editor/review-react` | `implemented_on_active_pr` — controlled accessible thread presentation over the React-free review contract; hosts own actions, authorization, bodies, and persistence |
 | Autosave | `@contextualwisdomlab/cwl-editor/autosave` | Provider-neutral bounded single-flight persistence coordination |
 | Headless Markdown | `@contextualwisdomlab/cwl-editor/markdown` | React-free deterministic Markdown/HTML/email/plain-text conversion |
 | Styles | `@contextualwisdomlab/cwl-editor/styles.css` | Editor layout and theming |
@@ -727,4 +729,4 @@ capabilities they require.
 - **Fonts:** Noto Sans families are SIL Open Font License 1.1.
 
 See [`LICENSE`](LICENSE), [`src/fonts/OFL.txt`](src/fonts/OFL.txt), and
-[`src/fonts/NOTICE`](src/fonts/NOTICE).
+[`src/fonts/NOTICE`](src/fonts/NOTICE).

docs/package-distribution.md

@@ -17,6 +17,8 @@ integrations.
 | `@contextualwisdomlab/cwl-editor/envelope-identity` | Framework-independent identity-only envelope routing for bounded schema identity inspection; migration remains host-owned |
 | `@contextualwisdomlab/cwl-editor/revision-evidence` | Framework-independent revision evidence and document-transition evidence for local content equality/lineage claims |
 | `@contextualwisdomlab/cwl-editor/text-position-selector` | `implemented_on_protected_main` — React-free text-position projection core implementing W3C `TextPositionSelector`; interactive capture, revision binding, authorization, persistence, and re-anchoring remain outside this subpath |
+| `@contextualwisdomlab/cwl-editor/review` | `implemented_on_active_pr` — React-free deterministic review-target validation bound to exact local SHA-256 revision evidence plus Inkspan's W3C text-position projection; durable review records and policy remain host-owned |
+| `@contextualwisdomlab/cwl-editor/review-react` | `implemented_on_active_pr` — controlled accessible React thread presentation over the bounded review contract; hosts supply labels and own actions, authorization, bodies, and persistence |
 | `@contextualwisdomlab/cwl-editor/markdown` | `implemented_on_active_pr` — headless deterministic Markdown/HTML/email/plain-text conversion with the same safe-link and strict inline-raster policies as the editor, without importing the React/TipTap editor graph |
 | `@contextualwisdomlab/cwl-editor/styles.css` | Editor layout and theming |
 | `@contextualwisdomlab/cwl-editor/fonts.css` | Full offline KR/EN/JP/SC/TC/VI font bundle |
@@ -58,11 +60,18 @@ embedded in the npm tarball.
   dependencies so the consumer's package manager installs and resolves it; it
   is not merely a type-only dependency.
 - The framework-independent autosave, converter, envelope-identity,
-  revision-evidence, text-position-selector, and Markdown entrypoints do not
-  require React UI, a mounted editor, naruon, contextual-orchestrator, a
+  revision-evidence, text-position-selector, review, and Markdown entrypoints do
+  not require React UI, a mounted editor, naruon, contextual-orchestrator, a
   database, provider credentials, or host transport. Their individual
   package-consumer gates additionally prevent framework dependencies from
   leaking into subpaths whose public contracts exclude them.
+- The review-react subpath is an optional controlled React presentation adapter.
+  It validates every host-supplied presentation through the React-free review
+  contract before rendering, receives visible and accessible copy from the host,
+  and emits selection, reply, and resolve intent callbacks only. Presentation
+  capability flags never grant authority on their own; missing host callbacks
+  keep actions disabled. It owns no comment body, actor lookup, authorization,
+  persistence, notification, or transport.
 - The Markdown subpath exposes `markdownToHtml`, `htmlToMarkdown`,
   `normalizeMarkdown`, `markdownToEmailHtml`, `markdownToPlainText`, and
   `htmlToPlainText` plus their option types. It bundles deterministic conversion
@@ -81,6 +90,15 @@ embedded in the npm tarball.
   state or bind a selector to a document revision. Hosts remain responsible for
   annotation identifiers/bodies, source-resource identity, authorization,
   tenancy, persistence, audit, and cross-revision re-anchoring.
+- The review subpath composes only validated local SHA-256 revision evidence,
+  Inkspan's canonical text-position selector/projection identity, and a detached
+  immutable v1 target. It rejects malformed, accessor-backed, symbolic, or
+  unknown target fields without retaining caller-owned objects. It cannot prove
+  that an arbitrary caller-supplied offset is inside a document without the
+  referenced document, and it creates no durable comment/thread identifier,
+  actor identity, authorization, tenant boundary, persistence, retention,
+  notification, audit occurrence, collaboration-provider admission, or
+  cross-revision re-anchoring authority. Hosts retain all of those duties.
 - Envelope identity output is routing metadata only. It does not accept an
   unsupported document generation as current semantics and does not move schema
   registry, migration, persistence, rollback, or authorization authority into
@@ -109,9 +127,9 @@ production library build. The verification chain:
 4. rejects internal source, tests, demos, Office files, coverage output, and
    workflow files from the npm tarball;
 5. imports the root, collaboration, converter, autosave, envelope-identity,
-   revision-evidence, text-position-selector, and Markdown surfaces through their
-   dedicated packed-consumer checks, including framework-free isolation where
-   that is part of the public contract;
+   revision-evidence, text-position-selector, review, review-react, and Markdown
+   surfaces through their dedicated packed-consumer checks, including
+   framework-free isolation where that is part of the public contract;
 6. exercises supported ESM/CommonJS entrypoints and compiles strict TypeScript
    consumers against the published declaration surfaces;
 7. resolves public CSS and font subpaths; and
@@ -129,6 +147,20 @@ rejects **ambient network and credential authority** such as `fetch`,
 of the selector's structural contract and introduce no interactive runtime
 authority.
 
+The active review-package check likewise builds and extracts a real npm tarball,
+executes `@contextualwisdomlab/cwl-editor/review` through ESM and CommonJS,
+compiles a strict TypeScript consumer, exercises valid and malformed target
+metadata, and rejects external runtime imports, dynamic module loaders, and
+ambient network or credential authority. This is active-PR evidence only until
+the review subpath is integrated into protected main.
+
+The active review-react package check is configured to build and extract a real
+npm tarball, exercise ESM and CommonJS server-render consumers plus strict
+TypeScript declarations, permit only host-supplied React peer runtime imports,
+and reject dynamic module loaders plus ambient network or credential authority.
+Its result is active-PR evidence only until the review-react subpath is integrated
+into protected main.
+
 The Markdown package check likewise builds and extracts a real npm tarball,
 executes its ESM and CommonJS entrypoints outside the source tree, compiles a
 strict TypeScript consumer, and verifies representative safe-link, plain-text,

package.json

@@ -80,6 +80,16 @@
       "import": "./dist/cwl-text-position-selector.js",
       "require": "./dist/cwl-text-position-selector.cjs"
     },
+    "./review": {
+      "types": "./dist/review/index.d.ts",
+      "import": "./dist/cwl-review.js",
+      "require": "./dist/cwl-review.cjs"
+    },
+    "./review-react": {
+      "types": "./dist/review-react/index.d.ts",
+      "import": "./dist/cwl-review-react.js",
+      "require": "./dist/cwl-review-react.cjs"
+    },
     "./markdown": {
       "types": "./dist/markdown/index.d.ts",
       "import": "./dist/cwl-markdown.js",
@@ -99,7 +109,7 @@
   ],
   "scripts": {
     "dev": "vite",
-    "build": "tsc --noEmit && vite build && vite build --config vite.collaboration.config.ts && vite build --config vite.converter.config.ts && vite build --config vite.envelope-identity.config.ts && vite build --config vite.revision-evidence.config.ts && vite build --config vite.autosave.config.ts && vite build --config vite.text-position-selector.config.ts && vite build --config vite.markdown.config.ts && node ./scripts/copy-styles.mjs",
+    "build": "tsc --noEmit && vite build && vite build --config vite.collaboration.config.ts && vite build --config vite.converter.config.ts && vite build --config vite.envelope-identity.config.ts && vite build --config vite.revision-evidence.config.ts && vite build --config vite.autosave.config.ts && vite build --config vite.text-position-selector.config.ts && vite build --config vite.review.config.ts && vite build --config vite.review-react.config.ts && vite build --config vite.markdown.config.ts && node ./scripts/copy-styles.mjs",
     "build:demo": "vite build --config vite.demo.config.ts",
     "fonts": "node ./scripts/fetch-fonts.mjs",
     "preview": "vite preview",
@@ -108,7 +118,7 @@
     "test:watch": "vitest",
     "coverage": "vitest run --coverage",
     "test:package-config": "node --test ./scripts/revision-evidence-consumer-config.test.mjs ./scripts/release-metadata.test.mjs ./scripts/javascript-runtime-authority.test.mjs",
-    "verify:package": "pnpm run test:package-config && node ./tests/package/verify-package.mjs && node ./tests/package/verify-editor-placeholder-package.mjs && node ./scripts/verify-canonical-envelope-package.mjs && node ./scripts/verify-revision-evidence-package.mjs && node ./scripts/verify-framework-free-revision-evidence-package.mjs && node ./scripts/verify-framework-free-envelope-identity-package.mjs && node ./tests/package/verify-framework-free-autosave-package.mjs && node ./scripts/verify-text-position-selector-package.mjs && node ./scripts/verify-text-position-selector-subpath-package.mjs && node ./scripts/verify-markdown-subpath-package.mjs"
+    "verify:package": "pnpm run test:package-config && node ./tests/package/verify-package.mjs && node ./tests/package/verify-editor-placeholder-package.mjs && node ./scripts/verify-canonical-envelope-package.mjs && node ./scripts/verify-revision-evidence-package.mjs && node ./scripts/verify-framework-free-revision-evidence-package.mjs && node ./scripts/verify-framework-free-envelope-identity-package.mjs && node ./tests/package/verify-framework-free-autosave-package.mjs && node ./scripts/verify-text-position-selector-package.mjs && node ./scripts/verify-text-position-selector-subpath-package.mjs && node ./scripts/verify-review-package.mjs && node ./scripts/verify-review-react-package.mjs && node ./scripts/verify-markdown-subpath-package.mjs"
   },
   "peerDependencies": {
     "react": "^18.0.0 || ^19.0.0",