@ai-matrx/alchemy 0.16.0 → 0.17.5

package/CHANGELOG.md

@@ -1,5 +1,48 @@
 # Changelog
 
+## 0.17.4
+### Unreleased
+
+- The bundled PowerPoint leaf retains PptxGenJS's full MIT notice in both JavaScript formats. Its artifact gate rejects a missing notice.
+
+**Consumer action:** none; presentation behavior and dependency installation are unchanged.
+
+## 0.17.3 — 2026-10-07
+
+- `/operate/pptx` now bundles its complete pptxgenjs + JSZip engine in that intentionally heavy lazy leaf. This removes pptxgenjs's transitive `image-size` advisory from installed consumer production dependencies while keeping `/operate` and every other entry engine-free. The 150 KB gzip ceiling is measured with 14% headroom and is enforced independently.
+
+**Consumer action:** upgrade to this release to remove the transitive advisory. Hosts do not need a separate `pptxgenjs` dependency; `buildPresentation` imports and its lazy first-use behavior are unchanged. The packed ESM and CommonJS consumer gates build real text-and-image presentations without either `pptxgenjs` or `image-size` installed.
+
+## 0.17.2 — 2026-10-07
+
+- `/operate` core no longer imports `normalizeTransferJson` it only re-exports (TS6133 under `noUnusedLocals` failed every sibling type-check that reads Alchemy source — content-ir-react's and dashboard's — and with it their publishes). `UnreadableFormatError.format` is a declared field, not a parameter property (TS1294 under `erasableSyntaxOnly`, the dashboard's type-check). No behaviour change; no consumer action.
+
+## 0.17.1 — 2026-10-07
+
+- `parseDelimited` guesses the line break from the text OUTSIDE quotes (as Papa Parse does). A cell holding `\r\n`
+  in a file whose records end `\n` used to make the whole file read as one CRLF-separated record.
+- Decision (AP-2): the CSV/TSV writer keeps `\n` between records (Excel, Sheets and every parser here accept it;
+  the clipboard TSV, tests and consumers depend on it). It is the one `join("\n")` in `serialize`; a CRLF dialect
+  would change it there and nowhere else.
+- `spreadsheetSafe` (on by default for the csv/tsv/xlsx formats, off for `toDelimitedText` unless passed) only
+  prefixes `'` on TEXT starting (after tab/CR/LF/space) with `=` `+` `-` `@`; a real number such as `-5` is never
+  altered (tests added). Pass `{ spreadsheetSafe: true }` for any untrusted text.
+
+Consumer action: none. Hand-rolled CSV writers in the app move to `toDelimitedText` / `buildFile`.
+
+## 0.17.0 — 2026-10-07
+
+ALC-19 tail: the last format/capture engines the app imported directly now have a door.
+
+- `/operate/capture`: `renderElement(element, options)` and `renderElementToDataUrl` (html-to-image, SVG
+  foreignObject renderer with `filter`, root `style`, `canvasWidth/Height`, `skipFonts`, `cacheBust`,
+  `imagePlaceholder`); loaded by `import()` only. html2canvas stays the engine for `captureElement`.
+- New subpath `/operate/zip`: `buildZip(entries, { compression, level, comment })` -> Blob, `readZip(input)` ->
+  `{ files, get(path) }` (JSZip, lazy; now a dependency, no longer dev-only).
+- New subpath `/operate/pptx`: `buildPresentation(fill, { title, author, subject, layout })` -> .pptx Blob (pptxgenjs, lazy).
+
+Consumer action: delete direct `html-to-image` / `jszip` / `pptxgenjs` imports; save Blobs with kit's `downloadFile`.
+
 ## 0.16.0 — 2026-10-07
 
 ALC-19 (T4–T12): Alchemy owns every file format the app reads or writes, and DOM capture.
@@ -930,4 +973,3 @@ Initial `@ai-matrx/alchemy` distribution package. It exports the existing kit co
 
 Wait for the initial npm publish and the required sibling package releases. Then install `@ai-matrx/alchemy` and replace multiple Alchemy package imports with the matching distribution subpath.
 
-