@quillmark/wasm 0.92.0 → 0.94.0

package/CHANGELOG.md

@@ -1,5 +1,551 @@
 # Changelog
 
+## v0.94.0 - 2026-07-15
+
+- Delete prose/plans directory
+- feat(wasm): promote the live-session/canvas surface to stable
+- docs(release): reconcile changelog and guides for 0.94.0 (skip 0.93)
+- test(core,quillmark): remove redundant and low-value tests
+- core: drop public→private rustdoc link in UiFieldSchema docs
+- core/seed: collapse merge-then-sort into one declaration-order pass
+- docs: declaration order is the field ordering contract; ui.order removed
+- core, bindings: update tests, golden, and doc surfaces for structural order
+- core: field declaration order becomes structural (IndexMap), ui.order retired
+- Simplify group-order sort key and ui.order stamping
+- Add card-level ui.groups registry for group identity and ordering
+- pdfform: place widget geometry once at bind, not per render
+- pdfform: gate form.json version before field-shape parse
+- pdfform: derive widget intrinsics from the quill schema (form@0.2.0, #940)
+- Reject nested ui.group; auto-order nested object properties
+- docs: densify the plaintext/enum section of the 0.93->0.94 guide
+- core, richtext: follow simplification cascades from plaintext
+- docs: extend canon (BLUEPRINT, PLATE_DATA) for plaintext and enum
+- docs: document plaintext and enum field types, narrow string
+- quillmark: end-to-end render test for plaintext through typst
+- core: test plaintext codec and enum promotion end-to-end
+- core: add plaintext and enum first-class field types
+- richtext: add from_plaintext literal codec and is_plain predicate
+- fix(typst/overlay): stop underline/strike decoration ink truncating $body regions
+- chore: migrate org references quillmark-org → borb-sh
+- docs: fix cross-tree link that broke mkdocs --strict
+- simplify: fix stale receiver refs and facade-prose misses after rename
+- rename typed-write facade editor→writer; unify on quill.writer(doc)
+- python: delete redundant commit_* verbs (subsumed by the editor)
+- docs: two-tier binding surface — parity table + strata/ephemerality (#932)
+- python: Document.editor(quill) front door + Editor/CardEditor + reads
+- wasm: quill.editor(doc) front door + tier-1 gap verbs + reads
+- wasm+python: delete addressed commit(addr) verb (subsumed by editor)
+- core: TypedEditor set_body + add_card (tier-1 mirror verbs)
+- simplify: follow the #925 cascades
+- docs: finish migration index entry; tidy wasm doc link
+- python: mirrored addressed write surface + corpus codec
+- wasm: addressed write surface (install/revise/applyChange/commit) + codec
+- richtext+core: pure Delta codec + install/revise body & field verbs
+- test(wasm): update runtime.test.js editor sugar to the strict contract
+- feat(core,wasm,python)!: typed field writes reject unknown names (#918)
+- wasm: split Card read type from CardInput write type (#917)
+- richtext: MarkOp::Remove subtracts the range instead of dropping the whole mark
+- fix(quillmark-pdf): dict/array depth walkers skip comments and strings
+- fix(richtext): markdown export never leaks a delimiter into the corpus
+- fix(richtext): saturate ordered-list marker; doc/hint cleanups from final review
+- #913: mirror the WASM typed batch on Python (commit_fields + set/commit reframe)
+- #911: finish exposing the typed editor in WASM (commitFields batch + JS editor sugar + reframe)
+- test(wasm): warm the lazy Typst backend load before timed Engine renders
+- test: consolidate generator-arm round-trips and costume proptests (tier 3-4)
+- test: remove orphan fixtures and redundant/low-value tests (tier 1-2)
+- docs: audit of legacy/redundant/low-value tests, fixtures, logic
+- richtext/core/bindings: address issues #902–#906
+- richtext: escape image alt/URL and link URL on markdown export (#900)
+- richtext: strip \r and bidi controls from apply_text_delta inserts
+- Remove prose/proposals/: 893 proposal has landed
+- Unify binding write-verb grammar: mechanical card-write twins (#895)
+- Hard cutover to commit_field: remove legacy richtext writers
+- wip: bindings + tests + docs for typed writes (pre-cutover)
+- Typed field writes: conform dispatch, commit_field, TypedEditor (core)
+- Review typed-field-writes proposal against codebase; resolve open questions
+- Add proposal: typed field writes via schema-carried types (#893)
+- feat(wasm): setCardBody — corpus writer for a non-main card body (#892)
+- remove(core,richtext,wasm)!: delete the incremental-edit surface (#886)
+- test(wasm): fix two applyFieldDelta tests left stale by the #881 un-gate
+- feat(regions): field_boxes helper + CorpusHit granularity signal (#884)
+- fix(core,wasm): resolve lint CI failure + re-sync applyFieldDelta type after merge
+- wasm/canvas: report clamp on PaintResult; document paint compositing constraints
+- fix(wasm): make applyFieldDelta and supportsCanvas types honest about their domain
+- docs: migration guide for the richtext field write-surface unification (#881)
+- richtext: un-gate applyFieldDelta to richtext fields (step 6)
+- wasm: setRichtextField / updateCardRichtextField + per-field markdown getter (step 5)
+- richtext: emit projects corpus fields to markdown; wire/DTO lossless (steps 2-4)
+- richtext: Card::set_field_richtext writer + corpus read-back (step 1)
+- fixtures: table_demo Quill + end-to-end table render test; document pdfform limit
+- richtext: property-test structured tables through normalize + round-trip
+- richtext: in-cell images degrade honestly instead of silent-Lossless
+- richtext: canonical table shape — validate invariants, repair in normalize
+- test: drop two redundant inline tests; dense-prose the runtime edit-surface note
+- Prune landed simplification entries from the backlog
+- Silence clippy nits in span_scan walk refactor
+- test(wasm): keep runtime edit-surface guard focused on the #876 methods
+- docs: fix rustdoc intra-doc links to satisfy the -Dwarnings lint gate
+- Filter locate's glyph walk to the target segment
+- Share frame-walk geometry between region scan and corpus walk
+- feat(wasm): expose incremental editor edit surface through runtime (#876)
+- Skip props re-clone in normalize when already key-sorted; document R2 hazard
+- Carry the <u>/Strong distinction instead of re-sniffing source
+- feat(typst): add plaintext(field) projection helper + document richtext migration hazard (#873)
+- Lift island mark-dispatch out of model into serial
+- Build canonical richtext tree once via move-based key sort
+- feat(wasm): add setBody(corpus) mutator on Document (#874)
+- Dedup emit_inline mark partition into wraps_and_codes
+- fix(typst): lower richtext(inline) fields to inline content (#872); fix wasm TS types (#875)
+- Remove unused ChangeLog/session forward surface
+- Cut over-engineered simplification findings; refresh drifted citations
+- docs(simplifications): remove the addressed findings
+- docs(simplifications): record the sync-twins deferral rationale
+- refactor(typst,richtext): dedup container dispatch and the #846 clip
+- refactor(core): one shared decoder for the dual-shape richtext seam
+- refactor(richtext): make apply_field_change all-or-nothing
+- refactor(core): single carrier for the richtext inline flag
+- refactor(richtext): drop unused usv UTF-16 helpers and content_key alias
+- refactor: apply low-risk simplifications from prose/simplifications
+- docs: record simplification-review findings in prose/simplifications/
+- fix(richtext): apply a short field delta leniently (auto-append remainder)
+- Trim unused test-only public methods from core
+- docs(core,typst): dense-prose pass on comments
+- docs(richtext): dense-prose pass on comments
+- docs(core): update QuillValue fill-setter reference after set_fill removal
+- Remove more dead/redundant logic
+- docs: remove stale info across canon, docs, and comments
+- test: remove redundant and low-value tests across the workspace
+- Remove dead and redundant logic
+- fix(docs): resolve broken intra-doc links (cargo doc -Dwarnings)
+- typst/richtext: address #855 cleanup findings
+- Fix #851 follow-up: transactional applyFieldDelta and fail-closed invalidation
+- richtext: fix issue #854 cleanup findings
+- fix(session): close the three delta-protocol lifecycle gaps (#851)
+- Fix low-risk API-surface findings from #856
+- fix(wasm): strip unreachable delta-API types from public runtime.d.ts (#850)
+- chore: ignore dist/, .vite/, test-results/ to prevent build-artifact commits
+- fix(richtext): cap single-line char diff to avoid quadratic blowup (#849)
+- fix(richtext): balance markdown export for overlap, escape `&` and trailing heading `#` (#848)
+- docs: fix richtext drift found in #853
+- fix(richtext): keep islands in sync on text-channel edits (#847)
+- fix(typst): balance markup for overlapping wrap+code marks (#846)
+- Render thematic breaks (---/***/___) instead of dropping them
+- fix(richtext): correct ChangeLog::map_pos staleness and future-revision handling
+- chore(richtext): drop richtext-spikes from integration branch
+- Move richtext inline shape to `inline: true` schema field.
+- feat(richtext): PR-H findings — fixture, runtime nav, docs (PR-H)
+- cargo fmt
+- feat(richtext): preview revision stamp + WASM session delta API (PR-F/PR-G)
+- feat(richtext): fallible document body mutators (PR-E)
+- docs(richtext): drop .qmd and Quill-Delta from phase-3 plan
+- docs(richtext): record PR-C/D landing in phase-3 plan
+- feat(richtext): add mark/line op channels and apply bundle (PR-D)
+- feat(richtext): add revision counter and bounded change log (PR-C)
+- feat(richtext): replace coarse delta::diff with Myers/LCS (PR-B)
+- Remove husky pre-commit hook
+- cargo fmt
+- docs(richtext): record phase-3 spike findings on integration branch
+- docs(richtext): align canon + code comments to PR-G, wrap up phase 2
+- fix(wasm): add span to canonical FieldRegion contract
+- richtext PR-G: richtext(inline), load-time example cache, alias cutover
+- Delete prose/review directory
+- docs(richtext): trim phase plans to landed reality, fold spike findings
+- test(richtext): wasm binding test for positionAt/locate round-trip (#829)
+- PR-F: regions + navigation — two-tier segment scan, position_at/locate (#829)
+- spike(richtext): PR-F de-risking — run-machine transparency + glyph.span.1 precision
+- fix(richtext): accept bodyMarkdown in the wasm card field allowlist
+- feat(richtext): phase-2 PR-E — bindings expose corpus body + bodyMarkdown
+- docs(richtext): clarify hard vs soft break in the CONVERT lowering table
+- docs(richtext): phase-2 PR-E canon rework for the corpus seam
+- feat(richtext): phase-2 PR-E — pdfform lowers richtext to plaintext + fixture
+- feat(richtext): phase-2 PR-E part 2 — delete the markdown oracle
+- feat(richtext): phase-2 PR-E part 1 — seam flip + typst consumes corpus
+- docs(richtext): reconcile Typst-emit section with structured cells
+- docs(richtext): PR-E handover + phase-2 status refresh
+- docs(richtext): remove the .qmd file-extension concept
+- feat(richtext): structured table cells — markdown a pure projection
+- feat(richtext): phase-2 PR-D — typst corpus emitter + segment source maps
+- feat(richtext): phase-2 PR-C — storage cutover to quillmark/document@0.93.0
+- fix(richtext): resolve broken RichText::validate intra-doc link
+- fix(core): quote payload scalars that would re-parse as a non-string
+- docs(richtext): PR-B landing log + PR-C handover on the phase-2 plan
+- fix(richtext): clear rustdoc -Dwarnings lint on phase-2 PR-B docs
+- test(bindings): update body expectations for corpus canonicalization
+- feat(richtext): phase-2 PR-B — Card.body is RichText, markdown a projection
+- docs(richtext): lock separate-crate topology + retire Quill-Delta framing in plan
+- refactor(richtext): make quillmark-richtext a leaf crate core depends on
+- docs(richtext): phase-2 plan — engine consumes RichText, delivers #829
+- docs(richtext): note block-quote emit decision for phase-2 handover
+- docs(richtext): phase-1 handover doc + integration HQ updates
+- fix(richtext): address phase-1 review — freeze determinism, codecs, anchors
+- feat(richtext): phase 1 — RichText corpus model, codecs, canonical serialization
+- docs(richtext): land phase-0 spike findings on the integration HQ
+- docs(richtext): make integration HQ canonical, self-contained
+- docs(richtext): open integration HQ plan for the content-model rework
+- Sync usaf_memo/0.2.0 fixture with airmark-quiver template
+- #824: dedup bindings tests + add two coverage guards
+- #823 items 2-9: dedup core + integration tests
+- #821 follow-up: fix rustdoc private-intra-doc-link in winansi_encode
+- #822: dedup typst backend + PDF crate tests (~280 lines)
+- #825: cache only the wasm cargo build dir, always regenerate pkg/
+- #806: resolve overlapping widget field_at by paint order, not name
+- Dead-code sweep from minimize-0.92.1-main review (#817–#821, #823, #825)
+- Ground #809/#810: memoize page checks, unify dict-splice + field-name filters (#816)
+- Tidy deferred backlog: dedup error-summary, pdfform flatten-limit docs, cleanup (#804, #807, #810, #812) (#815)
+- Fix silent-data-loss regression and blueprint/error/docs gaps (#803, #805, #808, #811) (#814)
+- Land LiveSession.fieldAt delegation; harden page_hashes against source spans (#801) (#813)
+- Helper codegen v2: markup blocks + generated data literal, retiring eval() and json() (#800)
+- Disable clippy in lint CI job (#798)
+- Satisfy clippy's manual_contains in the scalar-window walker
+- Drop the #797 spike modules from the branch
+- Harden the span scan against the review findings
+- Delete .claude/skills/simplification-cascades directory
+- Spike: generated data literal is Typst-equal to the json() blob
+- Spike: content fields as markup blocks resolve with per-node spans
+- Document the span-based region contract across canon, core, and the migration guide
+- Expose fieldAt on the WASM session; align binding docs with the span contract
+- Migrate usaf_memo off tagged(); rewrite region tests for the span contract
+- Span-based region tracking: codegen'd eval windows + glyph-span scan
+- Omit $body from the transform schema for body-disabled kinds
+- feat(regions): any array is element-addressable; SchemaMeta drops its unreachable Option
+- test(typst): own the widget-region test's schema instead of borrowing the fixture's
+- refactor(typst): collapse SchemaMeta per-kind table boilerplate, test-owned widget width
+- docs(migrations): document the compile-time region-binding validation in the working guide
+- fix(ci): hash every pkg/ input in the wasm cache key, check key sets in the drift guard
+- fix(wasm): sync canonical runtime.d.ts with the regions sidecar, wire typecheck into CI
+- feat(regions): validate form-field paths, reject scalar index-tagging, cache schema meta
+- docs(migrations): fix stale region-uniqueness line in 0.92→0.93 guide
+- Reconcile canon and migration guide with the reworked error system
+- Update binding surfaces to the current-compile warnings contract
+- Thread Typst compile warnings through the session as current-compile state
+- Collapse RenderError to a single diagnostics-carrying struct; drop Severity::Note
+- Amend error-rework proposal per adversarial review
+- Propose error system rework: one failure type, warnings on the compile seam
+- dense-prose: drop issue reference and history narration from regions test
+- feat(regions): tag the usaf_memo plate; canon + migration guide for the new region contract
+- feat(regions): per-placement regions, public tagged() helper, one-shot sidecar
+- docs: accuracy pass + dense-prose sweep across docs/, prose/canon/, comments, READMEs
+- build-wasm.sh: dev builds stamp next-patch -dev.<sha>, releases stamp verbatim
+- wasm runtime: snapshot caller handles before the first await
+- ci: enable the Clippy lint gate
+- Python: batched-error message embeds the first diagnostic
+- docs(core): note apply's $quill-check boundary on LiveSession::apply (#778)
+- perf(wasm): LiveSession retains QuillConfig, not the whole Quill (#778)
+- docs: canonize LiveSession — live preview owns apply/ChangeSet (#778)
+- feat(wasm): LiveSession.apply(doc) -> ChangeSet (#778)
+- Canon: endorse programmatic document construction
+- refactor!: collapse RenderSession into LiveSession (#778)
+- Add blank-canvas Document constructor in core and all bindings
+- feat: transactional apply() + ChangeSet on the render session (#778)
+- Add scalar From impls for QuillValue; mutators take Into<QuillValue>
+- Expose batched set_fields across Python, WASM, and .NET bindings
+- feat(typst): persist the World in the session; evict comemo after each compile (#778)
+- Add atomic batched Card::set_fields
+- remove(dotnet)!: drop the .NET binding entirely
+- Update README.md
+- Update README.md
+- Update README.md
+- Update README.md
+- Update README.md
+- Update README.md
+- Update README.md
+- fix: update WASM region test for content auto-tag; fix doc links
+- docs(region): tighten regions() doc per dense-prose
+- feat(region): one region per logical schema field
+- docs(region): fix grouping guidance and note blank/empty no-region case
+- refactor(typst): expose a region only for schema-addressable fields
+- feat(typst): auto-region tagging for content fields (#775)
+- refactor(core)!: move field regions from RenderResult to RenderSession::regions()
+- refactor(core)!: key regions on the quill schema field, not the backend widget
+- docs: fold prune-evolutionary-info into dense-prose
+- docs: canonize comment/doc style as the dense-prose skill
+- refactor(test): drop dangling BACKLOG.md reference
+- refactor(core): tighten doc-comments, prune evolutionary phrasing
+- refactor(bindings): neutralize marketing and reframe legacy phrasing
+- refactor(quillmark,cli,fuzz): tighten comments, drop bug-history narration
+- refactor(typst): tighten module and item doc-comments
+- docs(canon): prune evolutionary and marketing phrasing
+- docs: neutralize marketing and reframe legacy aliases in consumer docs
+- feat(pdfform): export PNG and SVG; remove the preview feature gate
+- fix(ci): resolve lint and docs CI failures on pdfform branch
+- fix(quillmark-pdf): make find_dict_value key/value-position aware
+- Make the plate a Typst-backend concern, not a universal one
+- Address branch-review findings: spine robustness, coercion parity, doc accuracy
+- Prune resolved review items 01–06; trim 07 to remaining gaps
+- Rework item 2: derive canvas capability, delete supports_canvas flag
+- Address branch-review item 3: total FieldRegion round-trip
+- Address branch-review items 1, 2, 4, 5, 6, 7
+- docs(review): write up unaddressed branch-review items for discussion
+- test(pdfform): restore flatten byte-level coverage at the unit level (preview-gated)
+- refactor(pdfform): PDF output always AcroForm; remove the public flatten knob
+- Update sample_form PDF title and field labels
+- Make pdfform framing industry-neutral
+- docs: add PDF Form backend page under quills section
+- refactor(pdfform): remove the form.json -> Quill.yaml scaffold
+- refactor(pdf): extract the incremental-update envelope into PdfUpdate
+- pdfform: WinAnsi flatten encoding, value clipping, shared PDF writer
+- review: resolve low-risk findings from pdfform branch review
+- Update README.md
+- Remove qualification layer and page composition: pdfform fills static forms only
+- feat(quillmark-pdf): page-merge primitive + continuation foundation (#757)
+- refactor(pdfform): centralize flatten value typography as one source of truth (#752)
+- feat(wasm): ship pdfform canvas + make the per-backend canvas contract explicit (#755)
+- feat(typst): generalize the plate API to arbitrary form-field(...) (#758)
+- feat(pdfform): card-instance value addressing in the resolver (#757)
+- feat(qualify): add quillmark-qualify — AcroForm PDF → form.pdf + form.json (#753)
+- chore(fmt): apply rustfmt line-wrapping to pre-existing drift
+- feat(pdfform,cli): scaffold Quill.yaml from a form.json field spec (#756)
+- fix(pdfform): build the preview feature against hayro's vello_cpu re-export
+- Expose form-field regions from stamped AcroForm backends (#759)
+- Implement `pdfform` backend + shared `quillmark-pdf` stamping spine (V1) (#750)
+- docs(proposal): design for pdfform backend + shared AcroForm spine (#744) (#748)
+- fix(python): count container levels, not the scalar leaf, in depth bound (#742) (#746)
+- Add generic hint for unresolvable Typst eval errors (issue #745) (#747)
+- docs: fix prose/canon, docs, and code-comment consistency drift (#743)
+- fix(core): count empty containers in json_depth_exceeds (#741)
+- Update README.md
+- docs: position Quillmark as a "schema-driven document engine" (#739) (#740)
+- review(0.93.0): fix stale comments, document scalar coercion, cover card markers (#738)
+- Unify blueprint emission on Document::to_markdown (#737)
+- docs(blueprint): fix $-line comment inaccuracies in canon (#735)
+- core: graciously coerce bare scalars into string fields (#733)
+- docs(spike): propose unifying blueprint placeholder on the !must_fill tag (#732)
+
+
+## v0.92.1 - 2026-06-22
+
+- Accept uppercase field names; reserve only `$`-prefixed keys (#730)
+- docs: canonize $ext.editor.title as per-card display name slot (#729)
+
+
+## Unreleased
+
+These notes cover everything since v0.92.1. No 0.93.x was separately
+published — the 0.93 milestone folds into this release, so the upgrade path
+from 0.92.1 is the `0.92-to-0.93` and `0.93-to-0.94` guides read in sequence.
+
+- feat(wasm): the live-session / canvas-paint surface graduates from
+  `@experimental` to stable — `Engine.open`, `LiveSession`, `apply` /
+  `ChangeSet`, `paint` / `PaintOptions` / `PaintResult`, `PageSize`, and the
+  `supportsCanvas` probe are now the committed preview API. The tag is dropped
+  from the runtime `.d.ts` / `.js`, the wasm README, and `PREVIEW.md`; further
+  shape changes follow the normal deprecation path rather than landing in any
+  0.x. `Engine.render` / `supportedFormats` remain the one-shot path
+- refactor(core)!: field ordering becomes fully structural — `ui.order` is
+  removed and an authored `order:` is a load error. Field and card-kind display
+  order is now the key order of the emitted schema (declaration order, backed by
+  an `IndexMap`), and the auto-stamped `order:` integer disappears from
+  `QuillConfig::schema()`; consumers walk the maps in key order instead of
+  sorting on a stamped index. Typed-dictionary / typed-table-row properties
+  render in declaration order, not alphabetically (#941). See
+  `docs/migrations/0.93-to-0.94.md`
+- feat(core)!: a card-level `ui.groups` registry gives groups identity and
+  order. `ui.group` becomes a validated reference to a snake_case id
+  (`quill::unknown_group` for a dangling ref); the registry's declaration order
+  fixes group display order, labels derive from the id with a `title:` override,
+  and a bare label-as-identity group is deprecated (`quill::implicit_group`). A
+  nested `ui.group` is a load error (`quill::nested_group_not_supported`) (#941).
+  See `docs/migrations/0.93-to-0.94.md`
+- feat(core,typst,wasm,python)!: `plaintext` and a first-class `enum` join the
+  schema. `plaintext` is navigable unformatted prose carried over the richtext
+  corpus (a literal codec, with a `plaintext(field)` helper on the Typst side);
+  `enum` is promoted to `type: enum` + `values:`, and the `enum:` modifier on
+  `string` is deprecated for one release. `string` narrows to open scalar data
+  (#938). See `docs/migrations/0.93-to-0.94.md`
+- refactor(core)!: `type: richtext(inline)` retires — declare `type: richtext`
+  with `inline: true`. The old token is a hard `quill::field_parse_error`, and
+  `inline: true` on a non-richtext field is likewise rejected. Blueprint still
+  emits `richtext(inline)<markdown>` and `build_transform_schema` gains
+  `quillmark:inline: true`, both derived from the flag; documents and corpus
+  wire shapes are unaffected. See `docs/migrations/0.93-to-0.94.md`
+- refactor(pdfform)!: `form.json` slims to a binding layer (`form@0.2.0`). Bound
+  `fields` drop `type` / `options` / `multiline` (derived from the schema
+  field's kind, `enum` values, and `ui.multiline`); unbound widgets move to a
+  `widgets` section; binding runs at load, so a bad `schema_field` fails with
+  `pdfform::dangling_binding` / `pdfform::unbindable_field` instead of a silent
+  blank. `form@0.1.0` is rejected and `$cards` absolute-index addressing is
+  removed. Widget geometry is placed once at bind, not per render (#940). See
+  `docs/migrations/0.93-to-0.94.md`
+- refactor(core,richtext,wasm,python)!: the binding write surface settles into
+  two tiers over a document-free corpus codec. `quill.writer(doc)` (wasm and
+  Python alike) is the documented default — typed `set` / `set_all` / `setBody`
+  / `addCard` / `card(i)` and quill-free `get` / `getMarkdown` reads — layered
+  over the corpus lane (`importMarkdown` / `exportMarkdown` / `rebase` / `mapPos`
+  plus the addressed `install` / `revise` / `applyChange` verbs) and the opaque
+  `setField` primitive. The eager `bodyMarkdown` / `fieldMarkdown` projections
+  and the per-address body writers retire pre-release; `replaceBody` /
+  `replace_body` / `update_card_body` alias for one cycle; richtext fields gain
+  the anchor-preserving `revise_field`; the addressed `commit(addr, …)` is
+  deleted (subsumed by the writer). A core-vs-bindings parity table governs
+  drift (#925, #932). See `docs/migrations/0.93-to-0.94.md`
+- refactor(wasm)!: the `Card` shape splits by direction — a read `Card` always
+  carries `body: RichText`, while `pushCard` / `insertCard` take a `CardInput`
+  whose `body` still accepts a markdown string and whose non-`kind` fields are
+  optional (#917). The card-write verbs become mechanical twins of their
+  main-card names: `updateCardField` / `updateCardFields` rename to
+  `setCardField` / `setCardFields` (#895). See `docs/migrations/0.93-to-0.94.md`
+- fix(typst/overlay): underline / strike decoration ink no longer truncates
+  `$body` field regions — the region geometry is taken before decoration strokes
+  extend the glyph ink box, so a highlighted body field's box matches the text
+  instead of the overrun (#937)
+- chore: migrate org references `quillmark-org` → `borb-sh` across the tree
+- fix(richtext): the markdown-export codec never leaks a delimiter into the
+  corpus. An editor `apply_mark_ops` mark can wrap a span markdown can't
+  represent (a `strong`/`emph`/`strike` edge on punctuation/symbols/whitespace,
+  or abutting a literal `*`) — the run would re-import as literal `**`/`*`/`~~`
+  text (bolding `a.` used to export `**a.**b`). `to_markdown` now verifies each
+  rendered line by re-parse and drops any mark whose emission would alter the
+  text, so the text always round-trips; only the unrepresentable formatting is
+  lost. Import-domain corpora are unaffected (still an exact fixed point).
+- feat(core,wasm,python)!: typed field writes via schema-carried types. One
+  per-type write dispatch (`conform_value(value, schema, mode)`) unifies the
+  render floor's coercion with a strict-write mode behind a `Leniency` flag; one
+  typed writer per address, `Card::commit_field(name, value, &FieldSchema)`,
+  dispatches on the schema — the write surface stays O(1) in field types. Adds
+  `EditError::FieldConform` for non-richtext mismatches (richtext keeps
+  `FieldRichtextDecode` / `FieldRichtextNotInline`). A schema-bound
+  `TypedWriter` (`Quill::writer(&mut doc)`) is the front door: `set` / `set_all`
+  resolve field types and strict-commit; a name the schema does not declare is a
+  typo on the typed path, so it fails with `EditError::UnknownField` instead of
+  falling to the opaque store (#918) — opaque storage stays available through the
+  raw `set_field` / `setField` / `setCardField` verbs. Bindings gain
+  `commitField` / `commitCardField` (wasm) and `commit_field` /
+  `commit_card_field` (Python, net-new — Python had no richtext field writer).
+  The pre-release richtext-specific writers are removed in the same cycle:
+  `Card::set_field_richtext`, wasm `setRichtextField` / `updateCardRichtextField`
+  — use the typed writer, which carries the `inline` constraint in the schema.
+  Strict writes drop the render floor's cross-type `Boolean`↔`Number` coercions
+  and fail a shape mismatch at the write, not at a later render (#893)
+- remove(core,richtext,wasm)!: delete the incremental-edit surface — the
+  per-field change log and everything layered on it: `richtext::ChangeLog` /
+  `FieldChange` / `StaleRevision`; `LiveSession::revision` /
+  `record_field_delta_at` / `record_field_change_at` / `ensure_base_revision` /
+  `map_field_pos` / `apply_for_field_delta`; the WASM `applyFieldDelta` /
+  `mapFieldPos` / `revision` and the `Delta` DTO; and the `revision` stamp on
+  `RenderedRegion` / `CorpusHit` (and `FieldRegion` / `CorpusHit` on the wire).
+  Anchoring a caret or selection across edits belongs to the editor's own
+  transaction mapping (a ProseMirror / CodeMirror `StepMap`), not a parallel
+  core-side position map: the bidirectional preview↔editor cursor bridge is
+  `positionAt` / `locate` over the current compile, exact inverses that never
+  consulted the change log. Whole-document `apply(doc)` stays the one edit verb.
+  This dissolves #886's anchor-stranding half outright and drops the
+  half-built delta path behind its per-keystroke-marshalling half; `Delta` /
+  `diff` / `diff_import` / the mark & line op channels remain as the corpus
+  writers' substrate (`replace_body`, `import_body_delta`, `apply_body_change`)
+  (#886)
+- feat(core,wasm): `field_boxes(field)` / `LiveSession.fieldBoxes(field)` derive
+  the whole-field highlight — one union rect per page over the field's
+  `span`-bearing content segments — so a "highlight the focused field" consumer
+  stops reimplementing the span-filter + per-page union by hand. `regions()`
+  stays the low-level disjoint truth (#829); the helper owns the union, and is
+  content-only (a scalar-reference/widget-only field returns `[]`, its box being
+  a single `regions()` rect). Core `field_boxes(&[RenderedRegion], field)` is a
+  pure function so the one-shot `RenderResult.regions` sidecar gets it too (#884)
+- feat(core,wasm): `CorpusHit.granularity` (`HitGranularity` = `cluster` |
+  `segment`) reports whether `positionAt`'s `pos` resolved cluster-exact or
+  floored to the containing segment's start (origin-less ink, a multi-line code
+  fence's interior), so a caret UI trusts a `cluster` offset for the caret and
+  treats a `segment` one as a segment selection instead of guessing. Additive-
+  optional, omitted from the wire when the backend does not report it (#884)
+- fix(wasm): `Engine.supportsCanvas` and `LiveSession.supportsCanvas` gain doc
+  comments cross-referencing each other: the two are spelled identically but
+  answer different questions (a pre-session backend estimate vs. this compile's
+  authoritative answer, which can diverge — e.g. a 0-page document) — the
+  divergence is now visible where each is used instead of only discoverable at
+  runtime (#883)
+- fix(core): drop two rustdoc intra-doc links from public items
+  (`RichtextDecodeError`, `Card::set_field_richtext`) to the private
+  `decode_richtext_value`, which `-D rustdoc::private-intra-doc-links` (part of
+  the lint gate) rejects since the link can never resolve for a doc reader;
+  reworded to a plain code span, matching the existing convention elsewhere in
+  the same file for referencing a private helper from public docs
+- fix(wasm): drop the `revision?` field from the public `CorpusHit`/`FieldRegion`
+  types and the broken `{@link LiveSession.mapFieldPos}` / `.revision` references
+  in `runtime.d.ts`. The delta API (`applyFieldDelta`/`revision`/`mapFieldPos`) is
+  not forwarded through `runtime.js`, so no published consumer could reach the
+  methods those fields pointed at, and the stamped `revision` was always `0` on
+  the reachable read paths (whole-doc `apply` is revision-neutral). The public
+  types no longer advertise a capability the shipped `LiveSession` doesn't expose
+  (#850)
+- refactor(core)!: `RenderSession` collapses into `LiveSession` — a persistent,
+  incremental compiler that owns preview (#778). Reads (`render`, the canvas
+  seam, `regions`) serve the session's current compile; the new transactional
+  `apply(json_data)` recompiles in place (on `Err` every read keeps serving the
+  last-good compile) and returns `ChangeSet { page_count, dirty_pages }` so a
+  preview repaints `dirty ∩ visible`. Typst applies incrementally: the session
+  persists its `QuillWorld` (fonts/packages/assets parsed once), swaps document
+  data via `Source::replace`, and fingerprints visible page content for the
+  dirty set; pdfform re-resolves + re-flattens (cheap by construction). New
+  `RenderError::ApplyUnsupported` is the seam default. The callerless
+  `typst_session_of` is removed. WASM: the `RenderSession` class is renamed
+  `LiveSession` and gains `apply(doc): ChangeSet`; don't re-open per edit. The
+  Typst backend now evicts `comemo`'s process-global cache after every compile,
+  bounding memory over long editing sessions. See
+  `docs/migrations/0.92-to-0.93.md`
+- remove(dotnet)!: drop the .NET binding (`crates/bindings/dotnet`, the
+  `quillmark-dotnet` crate, its `csharp/` managed layer, CI job, and NuGet
+  publish workflow). Second-class and unmaintained relative to WASM/Python;
+  removed rather than carried as bloat. Python and WASM are unaffected.
+- refactor(core)!: field regions move from `RenderResult` to a session-level
+  query, `RenderSession::regions()` (WASM `session.regions()`), and are keyed on
+  the quill schema field path, not the backend widget. Only the interactive
+  preview path wants region geometry; a one-shot byte render (PDF/PNG/SVG) does
+  not, so `RenderResult.regions` is removed and the geometry is read once off the
+  compiled session without a render. `RenderedRegion` (and the WASM
+  `FieldRegion`) drop `name`/`kind`/`fieldType`/`value` for a single `field`
+  carrying the schema address (e.g. `signature_block`); the pdfform AcroForm
+  widget name no longer leaks. A region is emitted only for a schema-bound field
+  — an unbound widget produces none. `RegionKind` is removed; the `quillmark-pdf`
+  `FieldSpec` gains `schema_field` and `stamp`/`flatten` return plain bytes
+  (`StampResult` is gone). Regions are geometry for overlays and canvas↔editor
+  cross-navigation, never a compositing input (#773). See
+  `docs/migrations/0.92-to-0.93.md`
+- feat(pdfform)!: the `pdfform` backend now exports PNG and SVG as first-class
+  `render()` output formats (`SUPPORTED_FORMATS == [Pdf, Svg, Png]`); PNG
+  rasters at `RenderOptions::ppi` (default 144). The `preview` cargo feature is
+  removed — the hayro raster/SVG/PNG seam is always linked, so SVG/PNG/canvas
+  work out of the box rather than behind a flag. The `quillmark` crate's
+  `pdfform-preview` feature is folded into `pdfform`; in the wasm crate both the
+  `typst` and `pdfform` build variants link the `web-sys` canvas painter directly
+- fix(quillmark-pdf): `find_dict_value` now walks the dict as strict
+  key→value pairs, so a Name in *value* position (e.g. `/Subtype /Producer`)
+  is no longer mis-matched as a key; the object/dict scanners also skip
+  `%`-comments, so `endobj` or a key token inside a comment can't derail
+  parsing of a base PDF. The `<<…>>`/`[…]` depth walkers (`extract_outer_dict`
+  and `read_value_end`'s nested-dict/array branches) skip `%`-comments and
+  literal `(…)` strings uniformly, so a `>>`/`]` carried inside a comment or
+  string no longer truncates a dict/array and drops the keys after it
+- feat(pdfform): add the Typst-free `pdfform` backend + shared `quillmark-pdf`
+  AcroForm stamping spine; rewire Typst signatures onto the spine; thread a
+  `regions` sidecar through `RenderResult` and generalize the raster-preview
+  seam (#749, #750). See `prose/canon/ARCHITECTURE.md` and
+  `docs/quills/pdfform-backend.md` for the shipped design.
+- refactor(pdfform): PDF output is always an interactive AcroForm (Technique A).
+  Value-flattening is internal machinery backing the SVG/PNG/canvas raster
+  outputs, never a PDF deliverable. The public `RenderOptions.flatten` knob is
+  removed across core and all four bindings (it was wired only in wasm, hardcoded
+  `false` in Python, and ignored in .NET)
+- fix(pdfform): the flatten path transcodes values to WinAnsi (with a
+  `WinAnsiEncoding` font) so accented/Latin-1 text renders correctly in the
+  raster output, and clips each value to its field box so long values can't
+  overflow
+- refactor(quillmark-pdf): hoist the shared PDF byte-serialization (object/text
+  writers, `/Info /Producer` stamp) into `quillmark_pdf::writer`, consumed by
+  both the stamp and flatten paths; `find_object_bytes` now matches any object
+  generation and returns the live (last) revision
+- docs(canon): canonize `$ext.editor.title` as the slot for a per-card display name
+- refactor(core)!: remove the hand-set `Backend::supports_canvas()`; derive
+  canvas capability from the one seam instead. `RenderSession::supports_canvas()`
+  (authoritative, from `page_size_pt`) and `formats_support_canvas()`
+  (pre-session hint, from output formats) replace it, so the capability can no
+  longer disagree with what `paint` does. The engine and WASM `supportsCanvas`
+  surfaces are unchanged in shape. See `docs/migrations/0.92-to-0.93.md`
+- build(wasm)!: rename the WASM engine feature `render` → `typst` (now the
+  default) and add a `pdfform` build variant, so a Typst-free
+  PDF-form bundle can ship without Typst. From-source builders pass
+  `--features typst` where they used `--features render`; the published JS API is
+  unchanged. See `docs/migrations/0.92-to-0.93.md`
+
 ## v0.92.0 - 2026-06-22
 
 - 0.92 technical-debt sweep: correctness, $seed hardening, de-duplication (#727)