feat(cph): implement nested outline manifest and batch/combined export

ADR-0029 — nested outline manifest, supersedes ADR-0008's flat [[parts]]:
- cph-model: recursive loader over manifest.toml containers / element.toml
  leaves; Lesson.parts (pure elements, DFS order) + Lesson.outline (elements
  interleaved with section headings at their DFS-open position); rejects
  ambiguous/incomplete folders and root-vs-container table misplacement
- cph-diag: new DiagCode::ManifestMalformed for carrier-document structure
  errors (discharges an existing TODO)
- cph-typst: augmented manifest now serializes the outline (element/section
  entries) instead of a flat parts array
- render/lib.typ: render-lesson renders section headings at their depth
- examples/TH-141 migrated to 5 nested section containers + 3 root segments,
  byte-identical element order; smoke-verified via cph check/build + pdftotext

ADR-0030 — batch & combined export, extends ADR-0009/0011:
- cph build with no --target batches every declared target (repeatable
  --target for an explicit subset); any target failure => non-zero exit,
  per-target ledger, independent per-target execution
- cph-model: bundle.toml loader (directory + [info]/[targets.*]/ordered
  lessons with per-lesson target overrides)
- cph-typst: augmented bundle manifest (path-prefixed member outlines),
  Engine::{compile_check_bundle,build_bundle_pdf}
- render/lib.typ: render-bundle assembles member lessons under per-lesson
  headings, depth-shifts their own section headings, resets example/lemma
  counters at each lesson boundary by default
- cph-cli: `cph bundle <path> --target <name>` subcommand, same batching
  contract as `cph build`
- new bundle fixtures/tests (cph-model unit + cph-typst through-template PDF
  compile), smoke-verified via a real 2-lesson merged PDF

Verification: cargo fmt/clippy/test clean across the workspace (68 tests);
real cph check/build/bundle runs against TH-141 and a bundle fixture, PDF
content inspected via pdftotext.

render/examples/smoke-eng/exports/student.typ

@@ -1,4 +1,4 @@
-// DEFAULT STUDENT TEMPLATE (framework default; ADR-0011).
+// DEFAULT STUDENT TEMPLATE (framework default; ADR-0011, outline shape ADR-0029).
 //
 // This is a *real, editable* file that lives in an engineering file at
 // `exports/student.typ`. The framework compiles it AS THE MAIN FILE with the
@@ -15,15 +15,16 @@
 // its own virtual root — an include inside cph-render would resolve against the
 // PACKAGE, not the engineering root. A `/<part.path>/<field>.typ` written HERE
 // (this template lives under `--root`) resolves against `--root`. So the
-// template loads content and hands cph-render an already-assembled `parts` array.
+// template loads content and hands cph-render an already-assembled `outline`
+// array (elements interleaved with section headings, ADR-0029).
 //
 // OPEN CONTRACT POINT — optional-content presence. typst has no "does this file
 // exist" primitive (a missing `include` is a hard compile error). So the
 // template CANNOT probe disk the way the old Rust driver did for lemma `proof`.
 // It relies on the manifest declaring which optional content fields are present,
-// via a per-part `fields` array listing the content fields that exist on disk
+// via a per-element `fields` array listing the content fields that exist on disk
 // (the engine knows this — it walks the part dir). Required fields are loaded
-// unconditionally; optional fields load only if listed in `fields`. If a part
+// unconditionally; optional fields load only if listed in `fields`. If an element
 // omits `fields`, optional content is skipped (conservative). The exact shape of
 // this declaration is for the manifest/Rust contract to pin.
 
@@ -35,38 +36,51 @@
 // Read the injected manifest (a path string relative to typst --root).
 #let manifest = toml(sys.inputs.manifest)
 #let info = manifest.at("info", default: (:))
-#let raw-parts = manifest.at("parts", default: ())
+#let raw-outline = manifest.at("outline", default: ())
 
-// Assemble each part: include its content fields (computed absolute paths,
-// resolved against --root) and read scalar fields from <path>/element.toml.
-// `part-fields` (from cph-render) is the single source of truth for kind->fields.
-#let parts = raw-parts.map(raw => {
-  let kind = raw.at("kind", default: none)
-  let path = raw.at("path", default: none)
-  let spec = part-fields.at(kind, default: (content: (), optional-content: (), scalars: ()))
-  // Which optional content fields are present on disk (manifest-declared).
-  let present = raw.at("fields", default: ())
-  let part = (kind: kind)
+// Assemble each outline entry:
+// - an "element" entry: include its content fields (computed absolute paths,
+//   resolved against --root) and read scalar fields from <path>/element.toml.
+//   `part-fields` (from cph-render) is the single source of truth for
+//   kind->fields.
+// - a "section" entry (ADR-0029): pass its title/depth straight through — no
+//   content to load, it is a heading.
+#let outline = raw-outline.map(raw => {
+  if raw.at("type", default: "element") == "section" {
+    (
+      entry-type: "section",
+      kind: raw.at("kind", default: none),
+      title: raw.at("title", default: ""),
+      depth: raw.at("depth", default: 1),
+    )
+  } else {
+    let kind = raw.at("kind", default: none)
+    let path = raw.at("path", default: none)
+    let spec = part-fields.at(kind, default: (content: (), optional-content: (), scalars: ()))
+    // Which optional content fields are present on disk (manifest-declared).
+    let present = raw.at("fields", default: ())
+    let entry = (entry-type: "element", kind: kind)
 
-  // Required content fields: <path>/<field>.typ (absolute, root-relative).
-  for field in spec.content {
-    part.insert(field, include "/" + path + "/" + field + ".typ")
-  }
-  // Optional content fields: only when the manifest says the file exists.
-  for field in spec.optional-content {
-    if field in present {
-      part.insert(field, include "/" + path + "/" + field + ".typ")
+    // Required content fields: <path>/<field>.typ (absolute, root-relative).
+    for field in spec.content {
+      entry.insert(field, include "/" + path + "/" + field + ".typ")
     }
-  }
-  // Scalar fields come from <path>/element.toml.
-  if spec.scalars.len() > 0 {
-    let element = toml("/" + path + "/element.toml")
-    for field in spec.scalars {
-      let v = element.at(field, default: none)
-      if v != none and v != "" { part.insert(field, v) }
+    // Optional content fields: only when the manifest says the file exists.
+    for field in spec.optional-content {
+      if field in present {
+        entry.insert(field, include "/" + path + "/" + field + ".typ")
+      }
     }
+    // Scalar fields come from <path>/element.toml.
+    if spec.scalars.len() > 0 {
+      let element = toml("/" + path + "/element.toml")
+      for field in spec.scalars {
+        let v = element.at(field, default: none)
+        if v != none and v != "" { entry.insert(field, v) }
+      }
+    }
+    entry
   }
-  part
 })
 
 // Presentation: per-level heading numbering. Default (一、 / 1.1 / 1.1.1) comes
@@ -74,6 +88,6 @@
 #render-lesson(
   info: info,
   target: target,
-  parts: parts,
+  outline: outline,
   heading-numbering: default-heading-numbering,
 )

render/examples/smoke-eng/exports/teacher.typ

@@ -1,4 +1,4 @@
-// DEFAULT TEACHER TEMPLATE (framework default; ADR-0011).
+// DEFAULT TEACHER TEMPLATE (framework default; ADR-0011, outline shape ADR-0029).
 //
 // Lives in an engineering file at `exports/teacher.typ`. Compiled AS MAIN with
 // the manifest injected:
@@ -18,38 +18,47 @@
 // Read the injected manifest (a path string relative to typst --root).
 #let manifest = toml(sys.inputs.manifest)
 #let info = manifest.at("info", default: (:))
-#let raw-parts = manifest.at("parts", default: ())
+#let raw-outline = manifest.at("outline", default: ())
 
-// Assemble each part: include its content fields (computed absolute paths,
-// resolved against --root) and read scalar fields from <path>/element.toml.
-// `part-fields` (from cph-render) is the single source of truth for kind->fields.
-#let parts = raw-parts.map(raw => {
-  let kind = raw.at("kind", default: none)
-  let path = raw.at("path", default: none)
-  let spec = part-fields.at(kind, default: (content: (), optional-content: (), scalars: ()))
-  // Which optional content fields are present on disk (manifest-declared).
-  let present = raw.at("fields", default: ())
-  let part = (kind: kind)
+// Assemble each outline entry: an "element" entry includes its content fields
+// and reads scalars from element.toml; a "section" entry (ADR-0029) passes
+// title/depth straight through as a heading, no content to load.
+#let outline = raw-outline.map(raw => {
+  if raw.at("type", default: "element") == "section" {
+    (
+      entry-type: "section",
+      kind: raw.at("kind", default: none),
+      title: raw.at("title", default: ""),
+      depth: raw.at("depth", default: 1),
+    )
+  } else {
+    let kind = raw.at("kind", default: none)
+    let path = raw.at("path", default: none)
+    let spec = part-fields.at(kind, default: (content: (), optional-content: (), scalars: ()))
+    // Which optional content fields are present on disk (manifest-declared).
+    let present = raw.at("fields", default: ())
+    let entry = (entry-type: "element", kind: kind)
 
-  // Required content fields: <path>/<field>.typ (absolute, root-relative).
-  for field in spec.content {
-    part.insert(field, include "/" + path + "/" + field + ".typ")
-  }
-  // Optional content fields: only when the manifest says the file exists.
-  for field in spec.optional-content {
-    if field in present {
-      part.insert(field, include "/" + path + "/" + field + ".typ")
+    // Required content fields: <path>/<field>.typ (absolute, root-relative).
+    for field in spec.content {
+      entry.insert(field, include "/" + path + "/" + field + ".typ")
     }
-  }
-  // Scalar fields come from <path>/element.toml.
-  if spec.scalars.len() > 0 {
-    let element = toml("/" + path + "/element.toml")
-    for field in spec.scalars {
-      let v = element.at(field, default: none)
-      if v != none and v != "" { part.insert(field, v) }
+    // Optional content fields: only when the manifest says the file exists.
+    for field in spec.optional-content {
+      if field in present {
+        entry.insert(field, include "/" + path + "/" + field + ".typ")
+      }
     }
+    // Scalar fields come from <path>/element.toml.
+    if spec.scalars.len() > 0 {
+      let element = toml("/" + path + "/element.toml")
+      for field in spec.scalars {
+        let v = element.at(field, default: none)
+        if v != none and v != "" { entry.insert(field, v) }
+      }
+    }
+    entry
   }
-  part
 })
 
 // Presentation: per-level heading numbering. Default (一、 / 1.1 / 1.1.1) comes
@@ -57,6 +66,6 @@
 #render-lesson(
   info: info,
   target: target,
-  parts: parts,
+  outline: outline,
   heading-numbering: default-heading-numbering,
 )

render/examples/smoke-eng/manifest.toml

@@ -1,11 +1,15 @@
-# Throwaway smoke engineering file for the cph-render template round (ADR-0011).
-# Exercises all 4 kinds + nested headings (per-level numbering) + an example with
-# a `source` scalar and one without + a lemma with proof and one without.
+# Throwaway smoke engineering file for the cph-render template round
+# (ADR-0011, outline shape ADR-0029). Exercises all 4 kinds + a section heading
+# + nested headings (per-level numbering) + an example with a `source` scalar
+# and one without + a lemma with proof and one without.
 #
-# The per-part `fields` array lists the content fields present ON DISK. The
-# template uses it to decide whether to load OPTIONAL content (lemma `proof`),
-# because typst has no file-exists primitive. (OPEN: the exact manifest shape for
-# declaring optional-field presence is for the Rust/manifest contract to pin.)
+# This file is compiled DIRECTLY via `typst compile --input manifest=/manifest.toml`
+# (see README below), bypassing the Rust engine's augmented-manifest builder
+# (`cph_typst::build_augmented_manifest`). So the `[[outline]]` shape here is
+# hand-authored to already be what that builder would produce: an ordered array
+# of `type = "element"` (kind, path, fields — the content fields present on
+# disk, since typst has no file-exists primitive) and `type = "section"`
+# (kind, title, depth) entries.
 
 [project]
 id   = "smoke-eng"
@@ -15,38 +19,54 @@ name = "cph-render template smoke"
 title  = "向量与几何 · 示例讲义"
 author = ["张老师", "李老师"]
 
-# segment — nested headings exercise per-level numbering (一、 / 1.1 / 1.1.1).
-[[parts]]
+# segment — exercises per-level numbering (一、 / 1.1 / 1.1.1) alongside the
+# section heading below.
+[[outline]]
+type   = "element"
 kind   = "segment"
 path   = "segments/向量数量积"
 fields = ["textbook"]
 
+# A section heading (ADR-0029): opens depth-1, groups the two examples that
+# follow. Contributes no element to the sequence.
+[[outline]]
+type  = "section"
+kind  = "section"
+title = "数量积的坐标计算"
+depth = 1
+path  = "examples"
+
 # example WITH source scalar
-[[parts]]
+[[outline]]
+type   = "element"
 kind   = "example"
 path   = "examples/坐标数量积"
 fields = ["problem", "solution"]
 
 # example WITHOUT source scalar
-[[parts]]
+[[outline]]
+type   = "element"
 kind   = "example"
 path   = "examples/求模长"
 fields = ["problem", "solution"]
 
 # lemma WITH proof (proof.typ present on disk; declared in fields)
-[[parts]]
+[[outline]]
+type   = "element"
 kind   = "lemma"
 path   = "lemmas/柯西不等式"
 fields = ["stmt", "proof"]
 
 # lemma WITHOUT proof (proof.typ absent; fields omits it)
-[[parts]]
+[[outline]]
+type   = "element"
 kind   = "lemma"
 path   = "lemmas/垂直判据"
 fields = ["stmt"]
 
 # sop
-[[parts]]
+[[outline]]
+type   = "element"
 kind   = "sop"
 path   = "sops/求夹角步骤"
 fields = ["sop"]